Vulnerabilities

TI-2026-15040 CVE-2026-18287 · GHSA-qvfj-hqjq-cmgm

Code injection in aeon

LOW 36

Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00342 Published 2026-08-20 No fix listed CWE-94

TI-2026-15039 CVE-2026-18286 · GHSA-mp6w-jh5v-fhmr

LOW 36

Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00342 Published 2026-08-20 No fix listed CWE-94

TI-2026-15038 CVE-2026-18285 · GHSA-88rp-m596-52gg

LOW 37

Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00547 Published 2026-08-20 No fix listed CWE-502

TI-2016-04177 CVE-2016-4832 · GHSA-94h4-gpx9-w23j

LOW 28

WAON "Service Application" for Android 1.4.1 and earlier does not verify SSL certificates.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00898 Published 2017-04-21 No fix listed CWE-295

TI-2005-00959 CVE-2005-1019 · GHSA-j8v3-g88r-7jc4

LOW 34

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01106 Published 2005-04-09 No fix listed