UL
Vendor
Ultralytics
10
CVEs
0
On KEV
8
New 30D
Products
UL8.8
Ultralytics
Ultralytics
7 CVEs0 on KEV7 new
FA5.3
FastSAM
Ultralytics
1 CVEs0 on KEV1 new
YO7.8
Yolov3
Ultralytics
1 CVEs0 on KEV0 new
YO7.8
Yolov5
Ultralytics
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118619 New | UL Ultralytics Ultralytics | 8.8 | Oct 28 | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability |
| CVE-2026-118618 New | UL Ultralytics Ultralytics | 7.8 | Oct 28 | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability |
| CVE-2026-118617 New | UL Ultralytics Ultralytics | 7.8 | Oct 28 | Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2026-118616 New | UL Ultralytics Ultralytics | 7.8 | Oct 28 | Ultralytics parse_model Code Injection Remote Code Execution Vulnerability |
| CVE-2026-118615 New | UL Ultralytics Ultralytics | 7.8 | Oct 28 | Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability |
| CVE-2026-118614 New | UL Ultralytics Ultralytics | 7.8 | Oct 28 | Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability |
| CVE-2026-118613 New | UL Ultralytics Ultralytics | 7.8 | Oct 28 | Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability |
| CVE-2026-111237 | FA FastSAM Ultralytics | 5.3 | Oct 16 | Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection |
| CVE-2021-31681 | YO Yolov3 Ultralytics | 7.8 | Jul 31 | Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file |
| CVE-2021-31680 | YO Yolov5 Ultralytics | 7.8 | Jul 31 | Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file |