Sicurezza
CVE of the day — CVE-2026-90777 (CVSS 8,8, high)?Procedurally generated video from real data from official public sources. Backgrounds are abstract AI-generated images and the narration is a synthetic voice (TTS). No real event is filmed or altered.
Transcript
Frequently asked questions
CVE-2026- 907
CVE-2026-90777: High gravity, CVSS score 8.8 out of 10 according to the National Vulnerability Database.
Non-safe deserialization
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights only=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files..
Exposure and mitigation
Vulnerability exploitable remotely, without privileges, with user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.



