CVE-2026-102739

ESPectre is a Wi-Fi motion sensing platform for ESP32. Prior to 3.0.0-rc1, Micro-ESPectre analysis tools, including tools/6_optimize_filter_params.py, tools/1_analyze_raw_data.py, and tools/10_train_ml_model.py, load NPZ datasets with NumPy pickle support enabled through micro-espectre/tools/csi_utils.py and a direct loader. A malicious dataset contributor or pull-request author can place an object-typed array in a .npz file under micro-espectre/data, causing pickle-controlled code to execute as the maintainer or developer when a documented analysis tool accesses the field. This issue is fixed in version 3.0.0-rc1.

• CWE-502

• https://github.com/francescopace/espectre/commit/adf495ceed41840497347f0196ba4a6968fc4ee1
• https://github.com/francescopace/espectre/pull/154
• https://github.com/francescopace/espectre/releases/tag/3.0.0-rc1
• https://github.com/francescopace/espectre/security/advisories/GHSA-g96x-h6rg-cqq3

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102728In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.20260…7.5
• CVE-2026-102729`gx_binres_theme_load()` sizes its theme buffer for the them…5.9
• CVE-2026-10273A vulnerability was found in php-censor up to 2.1.6. This af…7.3
• CVE-2026-102730Mounting an attacker-controlled NAND flash image (`lx_nand_f…8.6
• CVE-2026-102731Memory allocation with excessive size value vulnerability in…7.5
• CVE-2026-102734asteval is a Python expression evaluator designed for restri…5.5
• CVE-2026-10274A vulnerability was determined in indrasishbanerjee aem-mcp-…6.3
• CVE-2026-102740The AsyncHttpClient library allows Java applications to exec…5.8
• CVE-2026-102748Dgraph is an open source distributed GraphQL database. Prior…9.2
• CVE-2026-10275A flaw has been found in OpenSC up to 0.26.1. This affects t…5
• CVE-2026-102755DataEase is an open source data visualization and analysis t…5.1
• CVE-2026-102756DataEase is an open source data visualization and analysis t…5.1