VulnSocial

CVE-2026-53874Disclosure

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr. Attackers can embed malicious code in pickle files that evades detection but executes when the pickle is loaded from untrusted sources.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-18: 1PoC Mentioned / Linked · 2026-06-18: 1Technical Details · 2026-06-18: 106-18
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatAft@ThreatAft
    Disclosure

    🔐 🚨 CRITICAL: Picklescan Double Bypass — AI/ML Supply Chain at Risk CVE-2026-3490 (CVSS 10.0) + CVE-2026-53874 (CVSS 9.8) Universal blocklist bypass via pkgutil.resolve_name. 🔗 https://threataft.com/articles/cve-2026-3490-cve-2026-53874-picklescan-double-bypass-ai-supply-chain #CyberSecurity #ThreatIntel #infosec #AISecurity #ML

    Post summary

    The text announces critical CVEs 2026‑3490 and 2026‑53874, highlights a universal blocklist bypass via pkgutil.resolve_name, and provides high CVSS scores along with a link to an article for additional details.

    0000071
    31 followersView on X

Explore more

Back to dashboard