Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.2%	CVE-2026-115800mllm · Path Traversal Medium4.8EPSS 0.2%2026-10-23CVE Database V5CVE-2026-115800 CVE-2026-115800 is a path traversal vulnerability in the UbiquitousLearning mllm software up to version 2.0.2. It affects the load_model function in the pymllm/mobile/convertor/__init__.py file. The vulnerability arises from improper handling of the shard_file argument, allowing local attackers to perform path traversal. Exploit code is publicly available, but exploitation requires local access. The vendor has been informed but has not yet responded or issued a fix. EPSS 0.2%Vulnerability UbiquitousLearning	CVE Database V5	2026-10-23

Showing 1–1 of 1 result