Deserialization Of Untrusted Data - Vulnerability

Related Threat Clusters

• Critical RCE Vulnerability in Hugging Face Transformers Library Disclosed

  A critical remote code execution (RCE) vulnerability has been identified in the Hugging Face Transformers library, tracked as CVE-2026-4372. This flaw allows attackers to execute arbitrary code during model loading by…

  6 articles · Updated June 4, 2026
• CISA's KEV Catalog Sees 20% Increase in Vulnerabilities Amid Underreporting Concerns

  In 2025, the number of known exploited vulnerabilities in CISA's KEV catalog increased by 20%, with 245 new vulnerabilities added. However, research from Miggo Security indicates that the catalog may only represent 12%…

  6 articles · Updated January 5, 2026
• IBM Maximo Application Suite Vulnerabilities Disclosed

  IBM Maximo Application Suite has multiple vulnerabilities, including a CVSS Base score of 7.8 for CWE-502 related to deserialization of untrusted data. Additionally, another vulnerability has a CVSS 3.1 Base Score of…

  5 articles · Updated February 27, 2026

Recent Intelligence Reports

• Hugging Face Transformers contains critical remote code execution vulnerability — Letsdatascience · June 4, 2026
• Security Bulletin: IBM Maximo Application Suite — Ibm · February 27, 2026
• Exploited vulnerabilities accelerated in 2025, CISA KEV catalog shows — Scworld · January 6, 2026

Related Entities