2 matches found
CVE-2026-38950: Deserialization of Untrusted Data
An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files. The affected components load model files from session directories using torch.load with unrestricted deserialization...
7.8CVSS6.7AI score0.00372EPSS
SaveExploits0References2
CVE-2026-38950
An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files. The affected components load model files from session directories using torch.load with unrestricted deserialization...
8.5CVSS6.7AI score0.00372EPSS
SaveExploits0References5
20