2 matches found
CVE-2026-38950: Deserialization of Untrusted Data
An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files. The affected components load model files from session directories using torch.load with unrestricted deserialization...
7.8CVSS6.9AI score0.00144EPSS
SaveExploits0References2
CVE-2026-38950
An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files. The affected components load model files from session directories using torch.load with unrestricted deserialization...
8.5CVSS6.9AI score0.00144EPSS
SaveExploits0References5
20