CVE detail
CVE-2026-15535
A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this issue is the function Indexer.deserialize_from of the file retrieval_lm/src/index.py of the component retrieval_lm. Executing a manipulation of the argument index_meta.faiss can lead to deserialization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://vuldb.com/vuln/377885/ctivuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM - https://vuldb.com/vuln/377885vuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM - https://vuldb.com/submit/854999vuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM - https://vuldb.com/cve/CVE-2026-15535vuldb.com
No excerpt available.
Exploitvuldb.comJul 13, 2026, 6:16 AM No excerpt available.
Exploitgithub.comJul 13, 2026, 6:16 AMNo excerpt available.
Exploitgithub.comJul 13, 2026, 6:16 AM- https://github.com/AkariAsai/self-rag/github.com
No excerpt available.
Exploitgithub.comJul 13, 2026, 6:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16723CVSS 9.0 · Critical
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType…
- CVE-2026-15531CVSS 1.9 · Low
A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b2473e3706. Affected by this issue is the function torch.load of the file run_ne…
- CVE-2026-15529CVSS 5.3 · Medium
A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of…
- CVE-2026-14723CVSS 4.8 · Medium
A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/scripts/analyse_cache.py of the component Cache Handler. This…
- CVE-2026-14637CVSS 7.8 · High
A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getC…
- CVE-2026-12787CVSS 2.1 · Low
A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The man…