Do Son An MLflow vulnerability, CVE-2026-116690, is exploited in the wild as proof-of-concept code for it and RCE flaw CVE-2026-116692 goes public. Patch now.
MLflow
A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.
1,361 vulnerabilities found this week: 129 are critical. Prioritize Chrome’s Dawn exploit, FortiClient EMS, and new AI pipeline attacks. Get the full list.
In the dynamic world of machine learning (ML), where innovation and efficiency are paramount, a new challenge...
CVE-2023-2356 (CVSS score of 10) allows attackers to access local server files on tracking server through a relative path traversal exploit