{"items":[{"id":"CVE-2026-48705","published":"2026-11-05T20:44:30.681Z","updated":"2026-11-05T21:14:11.035Z","title":"MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)","severity":"CRITICAL","score":9.3,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2026-119578","published":"2026-10-30T13:18:15.757Z","updated":"2026-10-30T14:04:58.732Z","title":"MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2026-118684","published":"2026-10-28T18:59:54.186Z","updated":"2026-11-04T20:24:19.576Z","title":"MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads","severity":"HIGH","score":8.2,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2026-118683","published":"2026-10-28T18:59:53.203Z","updated":"2026-10-29T20:54:22.874Z","title":"MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf","severity":"HIGH","score":8.6,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00486,"kevAdded":null},{"id":"CVE-2026-109361","published":"2026-10-12T16:05:40.286Z","updated":"2026-10-26T20:38:53.960Z","title":"MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path","severity":"HIGH","score":7,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-109360","published":"2026-10-12T16:05:39.587Z","updated":"2026-10-13T17:29:37.331Z","title":"MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP","severity":"HIGH","score":7.7,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00562,"kevAdded":null},{"id":"CVE-2026-100846","published":"2026-09-27T01:28:41.003Z","updated":"2026-10-08T15:22:02.692Z","title":"MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization","severity":"HIGH","score":8.8,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-100845","published":"2026-09-27T01:28:40.337Z","updated":"2026-09-28T13:56:50.879Z","title":"MONAI before 1.6.0 Remote Code Execution via NumpyReader","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00203,"kevAdded":null},{"id":"CVE-2026-100844","published":"2026-09-27T01:28:39.672Z","updated":"2026-10-08T15:22:02.046Z","title":"MONAI before 1.6.0 OS Command Injection via dataset_name_or_id","severity":"HIGH","score":8.6,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00922,"kevAdded":null},{"id":"CVE-2026-100843","published":"2026-09-27T01:28:38.803Z","updated":"2026-09-30T15:17:39.080Z","title":"MONAI before 1.6.0 Remote Code Execution via algo_from_pickle","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2026-100842","published":"2026-09-27T01:28:38.149Z","updated":"2026-09-30T16:54:11.393Z","title":"MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains","severity":"HIGH","score":7.3,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2026-100841","published":"2026-09-27T01:28:37.499Z","updated":"2026-09-28T13:56:03.312Z","title":"MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-100840","published":"2026-09-27T01:28:36.821Z","updated":"2026-09-28T16:46:00.366Z","title":"MONAI through 1.6.0 Remote Code Execution via bundle configuration","severity":"HIGH","score":8.5,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2026-21851","published":"2026-01-07T22:27:19.410Z","updated":"2026-01-08T20:09:55.184Z","title":"MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download","severity":"MEDIUM","score":5.3,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2025-58757","published":"2025-09-08T23:42:11.009Z","updated":"2025-09-09T13:28:51.574Z","title":"MONAI's unsafe use of Pickle deserialization may lead to RCE","severity":"HIGH","score":8.8,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2025-58756","published":"2025-09-08T23:39:55.508Z","updated":"2025-09-09T13:28:57.518Z","title":"MONAI's unsafe torch usage may lead to arbitrary code execution","severity":"HIGH","score":8.8,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.0075,"kevAdded":null},{"id":"CVE-2025-58755","published":"2025-09-08T23:35:41.506Z","updated":"2025-09-09T13:29:04.890Z","title":"MONAI has path traversal issue that may lead to arbitrary file writes","severity":"HIGH","score":8.8,"vendor":"Project-MONAI","product":"MONAI","kev":false,"epss":0.00623,"kevAdded":null}]}