https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:07:46.388190+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-266465 EUVD-2026-266465 2026-10-05T17:07:46.498801+00:00 EUVD-2026-266465 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0762 fkie_cve-2026-0762 2026-10-05T17:07:46.498839+00:00

GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the stream_daas function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27956.

 https://cve.radiocsirt.org/vuln/ghsa-jmp7-x86g-r5c3 GHSA-jmp7-x86g-r5c3 2026-10-05T17:07:46.498875+00:00

GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but attack vectors may vary depending on the implementation.

The specific flaw exists within the stream_daas function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27956.