CVE-2026-52836

creationtimestamp| type| source ---|---|--- 2026-09-17 20:01:46+00:00| seen| https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625...

CVE-2026-56795

creationtimestamp| type| source ---|---|--- 2026-09-17 20:01:46+00:00| seen| https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625...

EUVD-2026-82414

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during collection. An...

CVE-2026-54916 NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during collection. An...

CVE-2026-54916 NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during collection. An...

CVE-2026-54752 NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

CVE-2026-54752

NetBox Device Type Library is a community-sourced collection of device type definitions for import into NetBox. The vulnerability resides in the read_pickle_data function within tests/pickle_operations.py, which uses pickle.load to deserialize pull-request-controlled tracked pickle cache files. A...

EUVD-2026-82413

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

CVE-2026-54752 NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

CVE-2026-54752 NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The validation test harness can deserialize pull-request-controlled tracked pickle cache files through pickle.load in the readpickledata function in tests/pickleoperations.py. An...

CVE-2026-85715

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:27+00:00| published-proof-of-concept| https://github.com/mattiasw/ExifReader/security/advisories/GHSA-pj96-35fp-cfcc...

CVE-2026-62672

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:26+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-37f3-6p89-6qr9...

CVE-2026-85731

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:18+00:00| published-proof-of-concept| https://github.com/oras-project/oras-go/security/advisories/GHSA-m37j-52j7-pjw7...

CVE-2026-69089

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w3f4-8pj2-599w...

CVE-2026-69147

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:09+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j...

CVE-2026-73245

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:08+00:00| published-proof-of-concept| https://github.com/kestra-io/kestra/security/advisories/GHSA-hpj9-grjp-7vc7...

CVE-2026-86038

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:04+00:00| published-proof-of-concept| https://github.com/libp2p/js-libp2p/security/advisories/GHSA-c3gv-825q-fvmp...

CVE-2026-75831

creationtimestamp| type| source ---|---|--- 2026-09-17 18:31:18+00:00| seen| https://gist.github.com/alon710/0c813f94f8f4231594aa209e75f9f7b9 2026-09-17 18:35:02+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6qw9-4vv5-jr97...

CVE-2026-65608

creationtimestamp| type| source ---|---|--- 2026-09-17 18:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqbeptd2c2t 2026-09-17 18:35:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c4wf-2xxc-68qm...

GHSA-VRF4-MX87-P53W

creationtimestamp| type| source ---|---|--- 2026-09-17 18:19:52+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvqbeba3dn2c 2026-09-17 19:31:30+00:00| seen| https://gist.github.com/alon710/2a63239df5d54f7447e1b660b93edce2...