Authenticated MLflow webhook SSRF rated CVSS 6.8 (CVE-2026-64849)
Logged-in attackers can make the server send arbitrary requests; versions and a fix are not given.
38
Organization
Zero Day Initiative
- Mentions · 7d54
- Mentions · 30d111
- All mentions258
- First seenAug 12, 2026
- Last mentioned1d ago
Timeline
258 articles · newest firstMLflow SHAP load_explainer bug allows RCE (CVE-2026-118627)
ZDI rates the deserialization flaw 7.8 and says the victim must open a malicious page or file.
54
Linux kernel CIFS use-after-free can escalate privileges locally
CVE-2026-72315 is rated CVSS 7.2 and requires the attacker to already run high-privileged code.
36
Linux kernel XFRM use-after-free allows local privilege escalation
ZDI rates CVE-2026-98231 at CVSS 7.8; low-privileged local code execution is required first.
44
MLflow Tracking Server jobs flaw can disclose sensitive information
Authenticated remote attackers can read sensitive data; ZDI rates CVE-2026-118624 at CVSS 5.4.
32
Linux kernel Logitech HIDPP use-after-free allows local privilege escalation
ZDI rates CVE-2026-93826 at CVSS 7.8 and requires existing low-privileged code execution.
44
MLflow AI Gateway SSRF can leak data if authenticated (CVE-2026-71211)
ZDI rates the authenticated flaw 7.7; the snippet does not name versions or a patch.
44
Unauthenticated MLflow get-artifacts SSRF leaks data (CVE-2026-118628)
ZDI rates the flaw 8.2; the snippet gives no affected versions, fix, or exploitation status.
52
FreeBSD kernel TTY race condition allows local privilege escalation
CVE-2026-58093 is rated CVSS 7.8 and requires low-privileged code execution before exploitation.
42
MLflow Tracking Server issues missing authorization allows privilege escalation
Authenticated remote attackers can raise privileges; ZDI rates CVE-2026-118626 at CVSS 5.4, with no fix listed.
34
MLflow Statsmodels load can run code after user action (CVE-2024-37052)
The target must open a malicious page or file; ZDI rates the flaw CVSS 7.8.
50
MLflow pickle evaluation artifact deserialization allows remote code execution
A user must open a malicious page or file; ZDI rates CVE-2026-118623 at CVSS 7.8.
44
Linux kernel IPv6 AH routing header bug enables local privilege escalation
ZDI rates CVE-2026-80844 at CVSS 8.8; an attacker needs low-privileged code execution first.
48
MLflow Tracking Server missing authorization allows privilege escalation
Authenticated remote attackers can escalate privileges; ZDI scores CVE-2026-118625 at CVSS 6.3.
36
Researcher claims new zero-click Telegram sticker bugs can run code on iOS
Aziz says logic flaws bypass server checks Telegram cited against rlottie bug CVE-2026-111105; no public proof or patch.
64
Orange Tsai details logic-only Microsoft Edge full chain from Pwn2Own
DEVCORE used five logic bugs and two Windows features for an Edge sandbox escape, earning $175,000 and a Pwnie award.
58
ESET reviews a week of PHP, kernel, and LiteLLM incidents
PHP fixes shipped October 21; nine firms, including ESET, told NBC News they had seen no successful PHP2Shell attacks.
58
ShinyHunters PeopleSoft zero-day is three flaws under CVE-2026-35273
Unauthenticated SSRF to the loopback-trusted admin hub yields code execution on PeopleTools 8.61 and 8.62.
82
Alpine iLX-F511 Bluetooth OBEX overflow allows unauthenticated code execution
ZDI rates the Pwn2Own zero-day at CVSS 6.8; a physically present attacker needs no authentication.
48
Alpine iLX-F511 zero-day exposes hard-coded SSH credentials for code execution
Network-adjacent attackers need no login; ZDI rates ZDI-26-819 at CVSS 6.3 after a Pwn2Own finding.
52
Safari type confusion bug allows remote code execution
CVE-2026-86974 is scored CVSS 8.8 and requires a user to open a malicious page or file.
58
Ultralytics cache deserialization zero-day can execute remote code
Opening a malicious page or file is required; ZDI rates ZDI-26-816 at CVSS 7.8.
55
Alpine iLX-F511 Bluetooth overflow allows adjacent code execution (ZDI-26-823)
ZDI rates the unpatched Pwn2Own flaw 8.0; an attacker must pair a malicious Bluetooth device before overflowing prh_sdp_service_search_decode.
52
Ultralytics check_det_dataset code injection can run remote code
ZDI-26-813 is a CVSS 7.8 zero-day that requires opening a malicious file or page.
58
AVG Internet Security link-following bug enables local privilege escalation
ZDI-26-832, tracked as CVE-2026-6064 and scored 7.3, needs existing low-privileged code execution.
44
Alpine iLX-F511 framework service 0-day allows unauthenticated RCE
Network-adjacent attackers need no login to call an exposed function; ZDI rates it CVSS 8.8.
58
Valkey numeric truncation bug allows authenticated remote code execution
ZDI rates ZDI-26-833 at CVSS 8.8; an authenticated attacker can run arbitrary code on Valkey.
52
Alpine iLX-F511 Android Auto overflow allows adjacent code execution
ZDI scores the unauthenticated Pwn2Own zero-day at CVSS 8.8 for network-adjacent attackers.
58
Alpine iLX-F511 vCard parser 0-day allows Bluetooth RCE
A network-adjacent attacker needs the unit to connect to a malicious Bluetooth device; ZDI rates it CVSS 8.0.
54
Alpine iLX-F511 diagapp 0-day allows local command injection
A physically present attacker needs no authentication; ZDI rates the Pwn2Own flaw CVSS 6.8.
40
macOS CoreText out-of-bounds read can disclose information
CVE-2026-112656 is scored CVSS 3.3 and requires opening a malicious page or file.
28
Ultralytics parse_model code injection allows remote code execution (ZDI-26-815)
ZDI rates the unpatched flaw 7.8; a victim must open a malicious file or visit a malicious page.
58
Ultralytics torch_safe_load command injection enables remote code execution
ZDI-26-814 is an unpatched CVSS 7.8 flaw that needs a user to open a file or visit a page.
58
Ultralytics parse_model code injection zero-day enables remote code execution
Victims must visit a malicious page or open a file; ZDI scores ZDI-26-817 at CVSS 7.8.
55
Alpine iLX-F511 method lets local attackers escalate privileges
Attackers need low-privileged code first; ZDI rates the Pwn2Own zero-day CVSS 7.8.
46
Alpine iLX-F511 Android Auto handler overflow allows code execution
Physically present attackers need no login; ZDI scores the Pwn2Own zero-day at 6.8.
48
Ultralytics torch_load untrusted deserialization leads to remote code execution
ZDI-26-812 scores 7.8 and needs a user to open a malicious file or visit a malicious page.
58
Ultralytics Google Drive path traversal zero-day can run attacker code
A user must open a malicious page or file; ZDI rates ZDI-26-818 at CVSS 8.8.
58
Alpine iLX-F511 Bluetooth stack 0-day can leak data
An attacker must first pair a malicious Bluetooth device; ZDI scores the out-of-bounds read CVSS 3.5.
32
Alpine iLX-F511 framework service overflow allows code execution
ZDI rates the unauthenticated, physically triggered flaw 6.8 and labels it a Pwn2Own zero-day.
48
Related CVEs
by mentions- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-697301%9.8Use-After-Free RCE in Windows DNS Server
- CVE-2026-55007<1%8.1Double Free Enables Unauthenticated RCE in Microsoft Exchange Server
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2026-695251%9.8Use-After-Free RCE in Windows Remote Desktop Services
- CVE-2026-19820<1%7.8Unbootable-System Denial of Service via Link Following in Backblaze Windows Backup Client
- CVE-2026-214131%9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b
- Signature check flaw enables privilege elevation in SharePoint Server
- CVE-2026-13129<1%7.8When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form…
Appears with
- Zero Day Initiativevendor · 62
- Foxit PDF Readerproduct · 36
- Foxitvendor · 36
- Microsoftvendor · 21
- Adobevendor · 17
- Linux kernelproduct · 16
- Windowsproduct · 14
- X.Org Serverproduct · 12
- X.Orgvendor · 12
- Alpinevendor · 11
- Trend Microorganization · 11
- Oraclevendor · 10
- Metavendor · 10
- FAIRChemproduct · 10
- MLflowproduct · 9
- Trend Microvendor · 9
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.