66 matches found
CVE-2026-18286
Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
CVE-2026-18287
Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2026-18285
Aeon loadrehabpiledataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2026-18287 Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
EUVD-2026-63435
Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2026-18287
aeon (Python time series library, aeon-toolkit/aeon) is vulnerable to code injection in the load_time_series_segmentation_benchmark method. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code, allowing an attacker to run arbitrary cod...
aeon-neuro (0.0.1), convst (>=0.3.0, <=0.3.1) +5 more potentially affected by CVE-2026-18287 via aeon (>=0.10.0, <=1.4.0)
aeon PYPI version =0.10.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.5.0, =0.6.0 Source cves: CVE-2026-18287 Source advisory: MEND:CVE-2026-18287...
CVE-2026-18287 Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2026-18287 Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
Aeon loadtimeseriessegmentationbenchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
CVE-2026-18286
CVE-2026-18286 is a code injection vulnerability in the aeon Python library, specifically within the load_human_activity_segmentation_datasets method. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code, allowing an attacker to achiev...
aeon-neuro (0.0.1), convst (>=0.3.0, <=0.3.1) +5 more potentially affected by CVE-2026-18286 via aeon (>=0.10.0, <=1.4.0)
aeon PYPI version =0.10.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =0.5.0, =0.6.0 Source cves: CVE-2026-18286 Source advisory: MEND:CVE-2026-18286...
CVE-2026-18286 Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
CVE-2026-18286 Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
CVE-2026-18286 Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
EUVD-2026-63434
Aeon loadhumanactivitysegmentationdatasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
deep-rehab-pile (0.1.3), heavyedge-classify (>=1.0.0, <=1.1.1) potentially affected by CVE-2026-18285 via aeon (>=1.3.0, <=1.4.0)
aeon PYPI version =1.3.0, =1.0.0, =1.1.1 Source cves: CVE-2026-18285 Source advisory: MEND:CVE-2026-18285...
CVE-2026-18285
The Aeon toolkit's load_rehab_pile_dataset method deserializes user-supplied data without validation, enabling arbitrary code execution in the process context. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). ZDI-CAN-28749. A fix commit exists at htt...
CVE-2026-18285 Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
Aeon loadrehabpiledataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2026-18285 Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
Aeon loadrehabpiledataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2026-18285
Aeon loadrehabpiledataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this vulnerability in that the target must visit a...