What’s Vulnerable › Vulnerabilities

CVE-2026-51385

• Severity: medium (CVSS 6.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-20 · updated 2026-10-24
• Weakness: CWE-94

Description

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validate_url, safe_fetch, _build_opener, _fetch_html and _download_binary functions.

References

• https://github.com/Arturo0x90/CVE-2026-51385/
• https://graphify.com
• https://lock.cmpxchg8b.com/rebinder.html
• https://github.com/Arturo0x90/CVE-2026-51385/

Get alerted when CVE-2026-51385 or the next vulnerability affects your stack