espnet

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

espnet records in CISA KEV

No espnet vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-61684 CVE-2026-90777 · GHSA-r7rw-fc94-3p58

ESPnet before 202609 Remote Code Execution via Unsafe Deserialization

HIGH 73

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00733 Published 2026-09-13 Fixed in 202609 CWE-502

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0