CVE-2026-28500

A flaw was found in Open Neural Network Exchange ONNX, an open standard for machine learning interoperability. A security control bypass exists in the onnx.hub.load function due to improper logic in its repository trust verification. An attacker can exploit this by providing a malicious model,...

CVE-2026-22323

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22323 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22322

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22322 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22320

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22320 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22316

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22316 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-31938

creationtimestamp| type| source ---|---|--- 2026-03-18 03:17:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31938 2026-03-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116248296001564766 2026-03-18 04:30:30+00:00| seen|...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

PYSEC-2026-103

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

PYSEC-2026-103

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

UBUNTU-CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-28500 ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-28500

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. In versions up to and including 1.20.1, a security control bypass exists in onnx.hub.load due to improper logic in the repository trust verification mechanism. While the function is designed to warn users...

CVE-2026-4318

creationtimestamp| type| source ---|---|--- 2026-03-17 10:31:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116244052137878986 2026-03-17 22:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbxxu7hht2s...

CVE-2026-4208

creationtimestamp| type| source ---|---|--- 2026-03-17 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116244049393964932 2026-03-17 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhardlwxe22o...

CVE-2026-4157

creationtimestamp| type| source ---|---|--- 2026-03-17 06:28:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116243096592688532 2026-04-11 02:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6sc23blx2m 2026-04-11 03:21:29+00:00| seen|...

CVE-2026-4252

creationtimestamp| type| source ---|---|--- 2026-03-17 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242987588275568 2026-03-20 12:34:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3024 2026-04-03 21:00:14+00:00| seen|...

CVE-2026-23489

creationtimestamp| type| source ---|---|--- 2026-03-17 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242633628583910 2026-03-18 15:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhdqurfkas2a 2026-08-05 15:00:07+00:00| published-proof-of-concept|...

CVE-2026-4156

creationtimestamp| type| source ---|---|--- 2026-03-17 02:52:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116242247253222316 2026-04-11 03:21:29+00:00| seen| Telegram/9p2zwy9MZzhVwoc6VK1G-jeZ0lfiSFc0xC5yOTrHz-Zg8Sw 2026-04-11 05:52:01+00:00| seen|...

CVE-2026-31852

creationtimestamp| type| source ---|---|--- 2026-03-16 19:08:55+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/116240425532826680 2026-03-20 18:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj3uisym32m 2026-05-20 18:07:09+00:00| seen|...