CVE-2026-118619

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-118614

Ultralytics checkdetdataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2026-118616

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118615

Ultralytics torchsafeload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-118613

Ultralytics torchload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2026-118618

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118617

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118619

The Ultralytics platform contains a Path Traversal vulnerability (CWE-22) within its Google Drive download handling functionality. The root cause is a lack of proper validation for user-supplied paths prior to performing file operations. A remote attacker can leverage this flaw to achieve Remote ...

CVE-2026-118619 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

EUVD-2026-112264

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2026-118618

The Ultralytics software is vulnerable to a Code Injection flaw within the parse_model function. This vulnerability arises from a lack of proper validation of a user-supplied string before it is used to execute Python code . A remote attacker can exploit this to execute arbitrary code in the cont...

CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

EUVD-2026-112263

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118617

The Ultralytics software is vulnerable to a Remote Code Execution (RCE) vulnerability in the load_dataset_cache_file function. The root cause is the lack of proper validation of user-supplied data , which leads to the deserialization of untrusted data (CWE-502). An attacker can leverage this flaw...

CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

EUVD-2026-112262

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118616

The Ultralytics software contains a Code Injection Remote Code Execution vulnerability within the parse_model function. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code. A remote attacker can leverage this flaw to execute arbitrary...

EUVD-2026-112261

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118615

The Ultralytics software is vulnerable to a Command Injection flaw within the torch_safe_load function. The root cause is the lack of proper validation of a user-supplied string before it is used to execute a system call. This vulnerability allows a remote attacker to execute arbitrary code in th...