CVE-2026-116103Medium· 6.3▾ SunlitA vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
neural_network_libraries 1.0neural_network_libraries 1.1neural_network_libraries 1.2neural_network_libraries 1.3neural_network_libraries 1.4neural_network_libraries 1.5neural_network_libraries 1.6neural_network_libraries 1.7neural_network_libraries 1.8neural_network_libraries 1.9neural_network_libraries 1.10neural_network_libraries 1.11neural_network_libraries 1.12neural_network_libraries 1.13neural_network_libraries 1.14neural_network_libraries 1.15neural_network_libraries 1.16neural_network_libraries 1.17neural_network_libraries 1.18neural_network_libraries 1.19neural_network_libraries 1.20neural_network_libraries 1.21neural_network_libraries 1.22neural_network_libraries 1.23neural_network_libraries 1.24neural_network_libraries 1.25neural_network_libraries 1.26neural_network_libraries 1.27neural_network_libraries 1.28neural_network_libraries 1.29neural_network_libraries 1.30neural_network_libraries 1.31neural_network_libraries 1.32neural_network_libraries 1.33neural_network_libraries 1.34neural_network_libraries 1.35neural_network_libraries 1.36neural_network_libraries 1.37neural_network_libraries 1.38neural_network_libraries 1.39.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116104Medium· 6.3Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection
CVE-2025-10097Medium· 6.3A vulnerability was identified in SimStudioAI sim up to 1.0.0
CVE-2023-29383Low· 3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger)
CVE-2023-27533High· 8.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation
CVE-2022-0391High· 7.5A flaw was found in Python, specifically within the urllib.parse module
CVE-2020-8177High· 7.8curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.