Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 02:57:31 +0000 CVE-2026-92785 — Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes https://cve.radiocsirt.org/vuln/cve-2026-92785 <p><strong>Affected:</strong> Angel-ML angel</p> <p>Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized objects to the master RPC endpoint.</p> <p><strong>Affected:</strong> Angel-ML angel</p> <p>Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized objects to the master RPC endpoint.</p> https://cve.radiocsirt.org/vuln/cve-2026-92785