CVE-2026-5659

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the file src/datrie.pyx of the component trie File Handler. The manipulation results in deserialization. The attack can be launched remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-20 CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Apr 6, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-565909.8HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could CVE-2026-565929.8HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, whi CVE-2026-565954.3HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could a CVE-2026-565963.5HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected CVE-2026-565975.3HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to CVE-2026-565992.2HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to expl CVE-2026-56606.3A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /CVE-2026-566085.3HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowin CVE-2026-566096.5HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions s CVE-2026-56615.3A vulnerability was identified in Free5GC 4.2.0. This affects an unknown function of the component NGSetupRequest Handler. Such manipulation CVE-2026-566195.4HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user CVE-2026-566204.3HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.