Vulnerabilities
Summary — last 7 days
New vulnerabilities4,992▲ 118 vs. last week
Critical / high2,109▼ 676 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)823▲ 759 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 0.63% | — | Xorbits XoscarAI | 10/13/2026 | 10/16/2026 | Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle… |