CVE-2026-120859

Published 5 November 2026 · tracked since 6 November 2026

Description

PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5.1.15, 5.2.x before 5.2.14, and 5.3.x before 5.3.10, contain deserialization of untrusted data and eval injection vulnerabilities that allow attackers to execute arbitrary code by supplying crafted files that a user open

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-120043 HIGH 7.5
• CVE-2026-119167 HIGH 7.2
• CVE-2026-110534 MEDIUM 6.4
• CVE-2026-19803 CRITICAL 9.8
• CVE-2026-121516 MEDIUM 6.1
• CVE-2026-120739 HIGH 7.2
• CVE-2026-120677 HIGH 7.2
• CVE-2026-120560 MEDIUM 6.5
• CVE-2026-119158 HIGH 7.2
• CVE-2026-93754 CRITICAL 9.8

→ Open the live CVE board · all tools