Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Low | 2.1 | CVE-2026-116104 |
A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0
SonySony Neural Network Libraries, Sony NNabla
|
NVD | |||
|
CVE-2026-116104A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0
Executive summaryA code injection flaw affects Sony NNabla Neural Network Libraries up to version 1.39.0. Converting a malicious model file can run attacker-chosen commands on the machine doing the conversion, and the advisory rates it High with a CVSS v3.1 score of 8.8. The advisory states that the project is end of life and no upstream fix is expected, so it recommends not converting .nnp files from untrusted sources until a patched fork exists. Technical summaryThe flaw is CWE-94 code injection: the NNP converter passes the attacker-controlled function.type field into Python eval() calls in func_set_nnabla_version_decorate (utils.py lines 111 and 116). A duplicate network name lets a malicious second network bypass the version gate, which only checks the first same-name network. Exploitation requires the victim to run nnabla_cli convert on a crafted .nnp file (network attack vector, user interaction required, no privileges). The advisory states that the affected version is 1.39.0 and that the earliest affected version is unknown, and it gives no fixed version because the project is EOL. Recommended fixes are replacing eval() with getattr/hasattr, validating function.type against known types, and enforcing unique network names. The advisory does not state any detection guidance, and no vendor advisory is listed. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/3em0/cve_repo/blob/main/2026…n-in-NNP-Converter-('function.type'-eval()).md Impact if exploitedConfidentialityLow IntegrityLow AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.1 | CVE-2026-116103 |
A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0
SonySony Neural Network Libraries, Sony Neural Network Libraries (nnabla)
|
NVD | |||
|
CVE-2026-116103A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0
Executive summarySony Neural Network Libraries (nnabla) up to and including v1.39.0 contains a code injection flaw in its command-line parameter encoder. An attacker who supplies a malicious parameter directory can run arbitrary operating system commands when a victim runs the documented encode_param command, and the advisory says this happens without any visible error. The advisory rates the issue High under CVSS v3.1 with a score of 8.8, and states that the project is end-of-life so no upstream patch is expected, with the workaround being to avoid processing parameter directories from untrusted sources. Technical summaryThe flaw is CWE-95 eval injection: the first line of each .txt parameter file is passed to Python's eval() without validation in load_param_in_txt() in encode_decode_param.py at line 37, reachable through nnabla_cli encode_param. Exploitation requires the victim to run the command on an attacker-supplied directory (CVSS AV:N, PR:N, UI:R, AC:L), and the advisory's proof of concept shows the canary command completing with exit code 0. Affected versions are stated as all versions up to and including v1.39.0, and the advisory says vulnerable code remains on the master branch; no fixed version is stated because the project is end-of-life and no upstream patch is expected. The suggested remediation is to replace eval() with ast.literal_eval() plus integer validation, and the stated workaround is to never run encode_param or decode_param on untrusted directories. The advisory gives no detection guidance beyond the proof of concept, and it does not state whether exploitation has been observed in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/3em0/cve_repo/blob/main/2026…)-Code-Injection-in-'nnabla_cli%20encode_param'-Leading-to-Arbitrary-Command-Execution.md Impact if exploitedConfidentialityLow IntegrityLow AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsSonySony Neural Network LibrariesSony Neural Network Libraries (nnabla)
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||