CVE-2026-111865

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

EUVD-2026-103375

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865

A security flaw exists in the THU-MIG yoloe project (up to commit 40cd606cabdbe2b566d6f14a6b162c89206e9a1b) within the AutoBackend Model Loading component. The vulnerability affects the eval function in the file ultralytics/nn/autobackend.py . By manipulating the imgsz/names/kpt_shape arguments, ...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865 THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111865: Improper Neutralization of Directives in Dynamically Evaluated Code

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kptshape results in improper...

CVE-2026-111212

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

CVE-2026-111237 Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.getmodelmeta.custommetadatamap of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument...

CVE-2026-111212

A security flaw exists in ImprintLab Medical-SAM-Adapter versions 0.1.0-alpha and 0.1.0 . The vulnerability is located within the AutoBackend Model Loading component, specifically in the session.get_modelmeta.custom_metadata_map function of the file models/MobileSAMv2/ultralytics/nn/autobackend.p...

CVE-2026-111212 ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

PT-2026-115366

Name of the Vulnerable Software and Affected Versions Ultralytics FastSAM versions up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52 Description An issue exists in the AutoBackend Model Loading component within the session.get modelmeta.custom metadata map function of the ultralytics/nn/autobackend....

CVE-2026-108945

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-108945

A code injection vulnerability exists in the iMoonLab yolov13 project (up to version 73289949533efac82bb5f72ec19b746618656bd2) within the AutoBackend Model Loading component. The flaw originates from the use of the eval function in the file ultralytics/nn/autobackend.py. By manipulating the imgsz...

CVE-2026-108945 iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

EUVD-2026-98204

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-108945: Improper Control of Generation of Code

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-90981

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nn' parameter in all versions up to, and including, 9.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-90981 Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nn' parameter in all versions up to, and including, 9.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-90981

The Newsletter – Send awesome emails from WordPress plugin (versions up to and including 9.3.8 ) is vulnerable to Reflected Cross-Site Scripting via the nn parameter, caused by insufficient input sanitization and output escaping in the dienow() function. An unauthenticated attacker can inject arb...

CVE-2026-90981 Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter

The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nn' parameter in all versions up to, and including, 9.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...