CVE record · 1 source
CVE-2026-52903
CVSS 8.8A deserialization of untrusted data vulnerability was found in ManageIQ.
- Vendor
- Red Hat
- Product
- red hat
- CVSS
- 8.8
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A deserialization of untrusted data vulnerability was found in ManageIQ.
A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production when a Psych::DisallowedClass error occurs. An…