Skip to content

CVE-2026-78681

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
August 26, 2026
Last Seen
August 26, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerabilities Disclosed in NLTK Toolkit72.0

A mass disclosure of four CVEs affecting NLTK versions before 3.10.3 was announced, with CVE-2026-79657 rated at CVSS 9.8. This critical vulnerability allows remote code execution through unsafe pickle deserialization, where allowlisted loaders trust entire module namespaces. Attackers can exploit t...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachDenial of ServiceCVE-2026-78682CVE-2026-78683CVE-2026-79657CWE-502 - Deserialization Of Untrusted DataCWE-776 - XML Entity ExpansionCWE-918 - Server-Side Request Forgery (ssrf)NLTKPythonBillion Laughs