EUVD-2026-112263

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118618

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118618

The Ultralytics software is vulnerable to a Code Injection flaw within the parse_model function. This vulnerability arises from a lack of proper validation of a user-supplied string before it is used to execute Python code . A remote attacker can exploit this to execute arbitrary code in the cont...

CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118617

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118617

The Ultralytics software is vulnerable to a Remote Code Execution (RCE) vulnerability in the load_dataset_cache_file function. The root cause is the lack of proper validation of user-supplied data , which leads to the deserialization of untrusted data (CWE-502). An attacker can leverage this flaw...

EUVD-2026-112262

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118616

The Ultralytics software contains a Code Injection Remote Code Execution vulnerability within the parse_model function. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code. A remote attacker can leverage this flaw to execute arbitrary...

CVE-2026-118616

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

EUVD-2026-112261

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

CVE-2026-118615 Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability

Ultralytics torchsafeload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

EUVD-2026-112260

Ultralytics torchsafeload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-118615

The Ultralytics software is vulnerable to a Command Injection flaw within the torch_safe_load function. The root cause is the lack of proper validation of a user-supplied string before it is used to execute a system call. This vulnerability allows a remote attacker to execute arbitrary code in th...

CVE-2026-118615

Ultralytics torchsafeload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-118614 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability

Ultralytics checkdetdataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

EUVD-2026-112259

Ultralytics checkdetdataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2026-118614

The Ultralytics software contains a Code Injection Remote Code Execution vulnerability within the check_det_dataset function. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code. This allows a remote attacker to execute arbitrary code...

CVE-2026-118614

Ultralytics checkdetdataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...