Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of untrusted pickle data in the share.py module, where the /execute/{method_name} and /simple_execute/{method_name} endpoints deserialize attacker-controlled HTTP request bodies using pickle.loads(). A remote attacker can supply a crafted pickle payload to these endpoints to execute arbitrary code in the server process, resulting in full container compromise when running in the default Docker deployment as root.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 CVE-2026-10042 — CVSS 9.8/10 ██████████ manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/4TSudT1shC
Post summary
A critical remote code execution flaw in manga‑image‑translator (CVE‑2026‑10042) has been announced, with a patch already available and no evidence of active exploitation or PoC.