ZDI publishes seven unpatched Ultralytics zero-days

1 source · 18 articlesFirst reported Oct 28, 2026 · 05:00 UTCUpdated Oct 28, 2026 · 05:00 UTC (2d ago)2

What's new

October 28: The ZDI notices still give no versions, patches, or CVEs for the seven Ultralytics zero-days.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

ZDI disclosed seven Ultralytics zero-days on October 28; all need user interaction and list no versions, patches, or CVEs.

Trend Micro’s Zero Day Initiative published seven Ultralytics zero-day advisories on October 28, 2026. Each can lead to remote code execution if a user opens a malicious file or visits a malicious page. The flaws cover check_det_dataset and two parse_model code-injection issues (ZDI-26-813, ZDI-26-815, ZDI-26-817), torch_load and load_dataset_cache_file deserialization (ZDI-26-812, ZDI-26-816), torch_safe_load command injection (ZDI-26-814), and a Google Drive download path traversal (ZDI-26-818). ZDI rates six at CVSS 7.8 and the path traversal at 8.8. The notices do not name affected versions, patches, or CVE identifiers.

Key facts

Seven advisories: ZDI-26-812 through ZDI-26-818, all labeled zero-days.
Six flaws are scored CVSS 7.8; Google Drive path traversal is 8.8.
Exploitation requires opening a malicious file or visiting a malicious page.
No affected versions, fixes, or CVE identifiers are stated.

Analyze CVE-2026-118610 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first

Oct 28, 2026ZDI publishes seven Ultralytics zero-day RCE advisories. · ZDI Published Advisories

What each outlet adds

beyond the shared facts

ZDI Published AdvisoriesNames functions, flaw classes, and the 8.8 path-traversal score.

CVEs: CVE-2026-118610

Vendors: Ultralytics Alpine
Products: iLX-F511 Alpine iLX-F511
Organizations: Zero Day Initiative

Coverage

oldest first · one row per article · UTC

Oct 28, 05:00 UTC · 2d ago ZDI Published AdvisoriesFirst report
Ultralytics check_det_dataset code injection can run remote code
ZDI-26-813 is a CVSS 7.8 zero-day that requires opening a malicious file or page.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 method lets local attackers escalate privileges
Attackers need low-privileged code first; ZDI rates the Pwn2Own zero-day CVSS 7.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Ultralytics torch_load untrusted deserialization leads to remote code execution
ZDI-26-812 scores 7.8 and needs a user to open a malicious file or visit a malicious page.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 Bluetooth overflow allows adjacent code execution (ZDI-26-823)
ZDI rates the unpatched Pwn2Own flaw 8.0; an attacker must pair a malicious Bluetooth device before overflowing prh_sdp_service_search_decode.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 framework service overflow allows code execution
ZDI rates the unauthenticated, physically triggered flaw 6.8 and labels it a Pwn2Own zero-day.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Ultralytics cache deserialization zero-day can execute remote code
Opening a malicious page or file is required; ZDI rates ZDI-26-816 at CVSS 7.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 framework service 0-day allows unauthenticated RCE
Network-adjacent attackers need no login to call an exposed function; ZDI rates it CVSS 8.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 Bluetooth stack 0-day can leak data
An attacker must first pair a malicious Bluetooth device; ZDI scores the out-of-bounds read CVSS 3.5.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Ultralytics parse_model code injection allows remote code execution (ZDI-26-815)
ZDI rates the unpatched flaw 7.8; a victim must open a malicious file or visit a malicious page.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 zero-day exposes hard-coded SSH credentials for code execution
Network-adjacent attackers need no login; ZDI rates ZDI-26-819 at CVSS 6.3 after a Pwn2Own finding.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Ultralytics parse_model code injection zero-day enables remote code execution
Victims must visit a malicious page or open a file; ZDI scores ZDI-26-817 at CVSS 7.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Ultralytics Google Drive path traversal zero-day can run attacker code
A user must open a malicious page or file; ZDI rates ZDI-26-818 at CVSS 8.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 Android Auto handler overflow allows code execution
Physically present attackers need no login; ZDI scores the Pwn2Own zero-day at 6.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 vCard parser 0-day allows Bluetooth RCE
A network-adjacent attacker needs the unit to connect to a malicious Bluetooth device; ZDI rates it CVSS 8.0.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Ultralytics torch_safe_load command injection enables remote code execution
ZDI-26-814 is an unpatched CVSS 7.8 flaw that needs a user to open a file or visit a page.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 diagapp 0-day allows local command injection
A physically present attacker needs no authentication; ZDI rates the Pwn2Own flaw CVSS 6.8.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 Android Auto overflow allows adjacent code execution
ZDI scores the unauthenticated Pwn2Own zero-day at CVSS 8.8 for network-adjacent attackers.
Oct 28, 05:00 UTC · 2d ago ZDI Published Advisories
Alpine iLX-F511 Bluetooth OBEX overflow allows unauthenticated code execution
ZDI rates the Pwn2Own zero-day at CVSS 6.8; a physically present attacker needs no authentication.

Vulnerabilities in this story

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-118610	Stack-based buffer overflow RCE in Alpine iLX-F511 Android Auto	8.8	—		2d ago