Products: 2
Vulnerabilities: 34
Known Exploited: 1
10
Critical Level Threats
16
High Level Threats
6
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-79721
Arbitrary Code Execution via Malicious MLflow Model Artifacts
Last Modified: Sep 11, 2026
Published: Sep 08, 2026
CVE-2026-69146
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
Last Modified: Aug 18, 2026
Published: Aug 17, 2026
CVE-2026-69148
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Last Modified: Aug 18, 2026
Published: Aug 17, 2026
CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
Last Modified: Aug 20, 2026
Published: Aug 17, 2026
CVE-2026-71211
mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint
Last Modified: Aug 10, 2026
Published: Aug 05, 2026
Items Per Page
