Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a manipulation of the argument dataSet results in path traversal. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-5535 📊 Severity: 4.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5535 #CVE-2026-5535 #CVE #Medium #CyberSecurity #InfoSec https://t.co/nFW9W8Quak
Post summary
The tweet only announces CVE-2026-5535 with basic severity and risk information and provides a link to the NVD entry, without any additional technical or exploitation details.
🚨*CVE* CVE-2026-5535 A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file http://FileUtils.java of the component MQTT Message Handler. Pe… https://www.cve.org/CVERecord?id=CVE-2026-5535 ----- Traducción: CVE-2026… http://infoflow.cloud`
Post summary
The text announces discovery of CVE-2026-5535 in FedML-AI but does not provide PoC, exploitation, patch, or detailed technical information.
CVE-2026-5535 A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file http://FileUtils.java of the component MQTT Message Handler. Pe… https://www.cve.org/CVERecord?id=CVE-2026-5535
Post summary
The text announces the discovery of CVE-2026-5535 in FedML-AI fed up to 0.8.9, noting the affected file and component but providing no proof‑of‑concept, exploit, or mitigation information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5535 - FedML-AI FedML MQTT Message http://FileUtils.java path traversal Intel Report: https://ift.tt/0i2YEPU
Post summary
An alert identifies CVE-2026-5535 as a path traversal flaw in FedML-AI FedML MQTT Message, accompanied by a link to an intel report.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tensoropera | fedml | - | - | - |