CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2026/01/24 9:15 a.m.•8 views

CVE-2026-0773

Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Upsonic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS6.6AI score0.00963EPSS

Exploits0References1

NVD•added 2026/01/23 4:16 a.m.•3 views

CVE-2026-0773

9.8CVSS0.00963EPSS

Exploits0References1

Cvelist•added 2026/01/23 3:29 a.m.•26 views

CVE-2026-0773 Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability

9.8CVSS0.00963EPSS

Exploits0References1

ATTACKERKB•added 2026/01/23 3:29 a.m.•2 views

CVE-2026-0773

9.8CVSS6.5AI score0.00963EPSS

Exploits0References2Affected Software1

CNNVD•added 2026/01/23 12:0 a.m.•2 views

Upsonic code issue vulnerabilities

Upsonic is an open-source AI proxy framework developed by Upsonic. Upsonic has code vulnerabilities, which stem from the lack of validation for data provided by users at the addtool endpoint. This vulnerability may lead to the deserialization of untrusted data and remote code execution...

9.8CVSS7.6AI score0.00963EPSS

Exploits0References1

Zero Day Initiative•added 2026/01/09 12:0 a.m.•11 views

(0Day) Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Upsonic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the addtool endpoint, which listens on TCP port 7541 by default. The issue results from the lack...

9.8CVSS7.7AI score0.00963EPSS

Exploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by