Ultralytics vulnerabilities
8 published CVEs name Ultralytics among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118619
Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High8.8 - CVE-2026-118618
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High7.8 - CVE-2026-118617
Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High7.8 - CVE-2026-118616
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High7.8 - CVE-2026-118615
Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High7.8 - CVE-2026-118614
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High7.8 - CVE-2026-118613
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability
Ultralytics · Ultralytics
High7.8 - CVE-2026-111237
Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection
Ultralytics · FastSAM
Medium4.8