[{"data":1,"prerenderedAt":49},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-119706":3},{"l":4,"details":25,"weitere":28,"indexierbar":47,"updated":48},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"epss":18,"slug":21,"bereich":22,"schweregrad":23,"art":24,"produktLabel":8},"CVE-2026-119706","gemeldet","","InternLM LMDeploy","2026-10-30",false,[12],"CWE-502",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.3,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"score":19,"percentile":20},0.0103,0.63984,"cve-2026-119706","dev","kritisch","Unsicheres Einlesen von Daten (Deserialisierung)",{"description":26,"refs":27},"InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the \u002Fupdate_weights endpoint. Attackers can submit a base64-encoded crafted pickle in serialized_named_tensors, which ForkingPickler.loads deserializes without validation, executing commands as the api_server process.",[],[29,37,42],{"cve":30,"status":6,"produktLabel":31,"vendor":32,"product":33,"art":34,"bereich":22,"schweregrad":23,"score":35,"epss":-1,"added":36,"ransomware":10},"CVE-2026-120779","Microsoft Visual Studio Code","Microsoft","Visual Studio Code","Einschleusen von Programmcode (Code Injection)",9.6,"2026-11-10",{"cve":38,"status":6,"produktLabel":39,"vendor":7,"product":39,"art":40,"bereich":22,"schweregrad":23,"score":15,"epss":41,"added":36,"ransomware":10},"CVE-2026-125370","Kubero","Fest eingebauter Schlüssel für die Verschlüsselung",0.00683,{"cve":43,"status":6,"produktLabel":44,"vendor":7,"product":44,"art":45,"bereich":22,"schweregrad":23,"score":46,"epss":-1,"added":36,"ransomware":10},"CVE-2026-125758","Aptabase","Unsichere Standardeinstellung",9.1,true,"2026-11-11T14:28:43.107Z",1794407352749]