CVE-2026-95182

Published 16 October 2026 · tracked since 17 October 2026

Description

An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-111613 HIGH 7.5
• CVE-2026-111392 MEDIUM 4.8
• CVE-2026-109461 MEDIUM 5.9
• CVE-2026-97380 HIGH 8.8
• CVE-2026-86047 HIGH 7.7
• CVE-2026-92262 CRITICAL 9.9
• CVE-2026-85745 MEDIUM 4.3
• CVE-2026-85746 CRITICAL 9.9
• CVE-2026-85748 CRITICAL 9.9
• CVE-2026-85985 MEDIUM 5.4

→ Open the live CVE board · all tools