Ultralytics

Products

ProductCVEsExploitedLatest
Ultralytics7–Oct 28, 2026
FastSAM1–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-118619 High 8.8 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability 0.5%
  • CVE-2026-118618 High 7.8 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability 0.2%
  • CVE-2026-118617 High 7.8 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.3%
  • CVE-2026-118616 High 7.8 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability 0.2%
  • CVE-2026-118615 High 7.8 Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability 0.4%
  • CVE-2026-118614 High 7.8 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability 0.2%
  • CVE-2026-118613 High 7.8 Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.2%
  • CVE-2026-111237 Medium 5.3 Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection 0.1%