Threats tagged 'ghsa-xh2q-vwqq-36hr'

A deserialization vulnerability exists in some BigDL software versions prior to 2.5.0b1 within Ring 3. This flaw may allow an unauthenticated, unprivileged attacker to escalate privileges via network access without user interaction. The impact on confidentiality, integrity, and availability is rated low, with no subsequent system-level impacts expected. The vulnerability is tracked as CVE-2026-52899 with a medium severity rating and a CVSS 4.0 score of 6.9.