CVE detail
CVE-2026-15531
A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_nerf.py of the component Checkpoint File Handler. The manipulation of the argument ckpt_path leads to deserialization. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The pull request to fix this issue awaits acceptance.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://vuldb.com/vuln/377874/ctivuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM - https://vuldb.com/vuln/377874vuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM - https://vuldb.com/submit/854906vuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM - https://vuldb.com/cve/CVE-2026-15531vuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM No excerpt available.
Exploitgithub.comJul 13, 2026, 6:16 AMNo excerpt available.
Exploitgithub.comJul 13, 2026, 6:16 AMNo excerpt available.
Exploitgithub.comJul 13, 2026, 6:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16723CVSS 9.0 · Critical
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType…
- CVE-2026-15535CVSS 2.1 · Low
A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this issue is the function Indexer.deserialize_from of the file re…
- CVE-2026-15529CVSS 5.3 · Medium
A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of…
- CVE-2026-14723CVSS 4.8 · Medium
A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/scripts/analyse_cache.py of the component Cache Handler. This…
- CVE-2026-14637CVSS 7.8 · High
A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getC…
- CVE-2026-12787CVSS 2.1 · Low
A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The man…