CVE-2025-71463

Scapy before 2.7.0 contains an insecure deserialization vulnerability in the loadsession function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s option or conf.session, executing embedded...

PT-2026-146572

Name of the Vulnerable Software and Affected Versions Scapy versions prior to 2.7.0 Description An insecure deserialization issue exists in the load session function. An attacker can execute arbitrary Python code by tricking a user into loading a specially crafted .pkl.gz pickle session file via...