Detectron2 load_proposals_into_dataset flaw allows RCE (ZDI-26-908)
ZDI rates this Meta Detectron2 zero-day 7.8; opening a file or page is required.
52
Product
Detectron2
- Mentions · 7d6
- Mentions · 30d6
- All mentions6
- First seenNov 11, 2026
- Last mentioned14h ago
Timeline
6 articles · newest firstDetectron2 LazyConfig zero-day enables remote code execution
ZDI-26-910 scores the unpatched LazyConfig deserialization bug CVSS 7.8 and requires user interaction.
52
Meta Detectron2 checkpoint loading can run code (ZDI-26-912)
Untrusted deserialization in detection_checkpoint is unpatched; ZDI rates it CVSS 7.8.
58
Detectron2 CfgNode.merge_from_file flaw allows RCE (ZDI-26-909)
ZDI scores the Meta Detectron2 zero-day 7.8 and says user interaction is required.
52
Meta Detectron2 DensePose flaw allows RCE via untrusted data (ZDI-26-911)
ZDI rates the zero-day 7.8; a user must open a malicious file or visit a malicious page.
52
Detectron2 vertex_feature_embedder zero-day enables remote code execution
ZDI-26-907 rates the unpatched Meta Detectron2 flaw CVSS 7.8 and requires a malicious page or file.
52
Appears with
- Zero Day Initiativeorganization · 6
- Metavendor · 6
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.