CVE-2026-95182
Published
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 10epss 0.5%
exploitation probability
0.5%top 55% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
cve_referencegithub.com/lkloliver/poc/tree/main/CVE-2026-95182unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.