Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/04/24 12:31 a.m.•21 views

EUVD-2026-25305

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.8CVSS6.2AI score0.01044EPSS
SaveExploits1References4
NVD
NVD
•added 2026/04/23 10:16 p.m.•21 views

CVE-2026-26210

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.8CVSS0.01044EPSS
SaveExploits1References3
CVE
CVE
•added 2026/04/23 9:24 p.m.•37 views

CVE-2026-26210

KTransformers (versions up to 0.5.3) contains an unsafe deserialization vulnerability in the balance_serve backend. The scheduler RPC server binds a ZMQ ROUTER socket to all interfaces without authentication and deserializes incoming messages with pickle.loads() without validation, enabling an at...

9.8CVSS6.7AI score0.01044EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2026/04/23 9:24 p.m.•13 views

CVE-2026-26210 KTransformers Unsafe Deserialization RCE via balance_serve

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.3CVSS6.4AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/04/23 9:24 p.m.•50 views

CVE-2026-26210 KTransformers Unsafe Deserialization RCE via balance_serve

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.8CVSS0.01044EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/23 12:00 a.m.•1 views

CVE-2026-26210: Deserialization of Untrusted Data

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.8CVSS6.5AI score0.01044EPSS
SaveExploits1References5
Rows per page
Query Builder