CVE-2026-49471High· 8.3▾ Twilight

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score46/ 100 · Moderate

impact 45.7 · likelihood 0 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2026-49471 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.