Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class instantiation. Attackers can exploit this by crafting malicious pickle payloads to bypass RCE blocklists and create lock files or other filesystem artifacts, potentially causing denial of service or application disruption.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-56304 Unsafe Pickle Deserialization in picklescan Before 1.0.1 Enables Arbitrary File Creation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56304
Post summary
CVE-2026-56304 is a newly disclosed vulnerability where unsafe pickle deserialization in picklescan before 1.0.1 allows arbitrary file creation.
🚨*CVE* CVE-2026-56304 picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.Fil… https://www.cve.org/CVERecord?id=CVE-2026-56304 ----- Traducción: CVE-2026-56304 pic… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑56304, noting that picklescan versions before 1.0.1 contain an unsafe pickle deserialization flaw that allows unauthenticated attackers to create arbitrary zero‑byte files, and links to the official CVE record.
CVE-2026-56304 picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.Fil… https://www.cve.org/CVERecord?id=CVE-2026-56304
Post summary
This post provides a brief disclosure of CVE-2026-56304, detailing the unsafe pickle deserialization flaw that allows unauthenticated creation of arbitrary zero‑byte files.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mmaitre314 | picklescan | - | - | - |