{"vulnerability": "cve-2026-76850", "sightings": [{"uuid": "5a2ca255-9fd4-4a3a-8659-d1a545650412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrsumdt2f", "content": "Daily IT Security Digest \u2014 2026-08-20\nRadar](https://radar.offseq.com/threat/hackers-exploit-geoserver-sqli-zero-day-rce/), [Mastodon](https://infosec.exchange/@offseq/117092687906166890))\n\n## 5. InternetLM lmdeploy RCE via Pickle Deserialization \u2014 CVE-2026-76850\n\nA critical remote code execution", "creation_timestamp": "2026-08-20T05:03:08.555308Z"}, {"uuid": "1ab3a273-ee41-473b-813f-6d115a082716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtihrtfv6f2p", "content": "Daily IT Security Digest \u2014 2026-08-20\nAI/ML infrastructure deployments. (Source: [OFFSEQ Radar](https://radar.offseq.com/threat/cve-2026-76850-internlm-lmdeploy-rce/), [Mastodon](https://infosec.exchange/@offseq/117125246166620239))\n\n## 6. ServiceNow RCE CVE-2026-6875 Exploited to Bypass Sandbox", "creation_timestamp": "2026-08-20T05:03:09.198099Z"}, {"uuid": "21e294ff-9569-4c09-acfc-2e68611bb027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtktm63u3t25", "content": "CVE-2026-76850\nLMDeploy reads messages from other machines and automatically turns them into executable instructions without first checking the source. An attacker who can supply those messages could cause the LMDeploy\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T03:40:04.128811Z"}, {"uuid": "68025dda-9bf0-4f4b-9760-317d1077fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx", "content": "CVE-2026-76850 - LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector\nCVE ID : CVE-2026-76850\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : LMDeploy deserializes disaggregated-serving peer mes...", "creation_timestamp": "2026-08-19T22:56:46.323082Z"}, {"uuid": "cc7a005b-128b-4e1d-8f46-a559be82cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r", "content": "\ud83d\udd34 CVE-2026-76850 - Critical (9.8)\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv corout...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:00:35.359390Z"}, {"uuid": "d8e7590e-d01b-48ec-98fb-1378fe759004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthxfyxigq25", "content": "\ud83d\udea8 CVE-2026-76850 \u2014 CVSS 9.3 CRITICAL\n\nLMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76850\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T00:10:12.370811Z"}, {"uuid": "d16cfbc3-cf3e-45f4-8c48-4a1e0fd21664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117125246166620239", "content": "CVE-2026-76850 (CRITICAL): InternLM lmdeploy <0.16.0 vulnerable to remote code execution via untrusted pickle deserialization on ZeroMQ endpoints. Enable API keys or disable disaggregated serving to mitigate. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fdd1d6177df51 #OffSeq #Infosec #Vuln #CVE202676850", "creation_timestamp": "2026-08-20T01:30:26.298765Z"}, {"uuid": "c89c16ac-1a62-40b0-b913-7ac7df626cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76850", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mti3vinry42x", "content": "InternLM lmdeploy (0.9.2 \u2013 <0.16.0) CRITICAL vuln: Untrusted pickle deserialization allows remote code execution if disaggregated serving is enabled. Enable API keys or disable the feature. https://radar.offseq.com/threat/cve-2026-76850-deserialization-of-untrusted-data-in-internlm-lmdeploy-657fd...", "creation_timestamp": "2026-08-20T01:30:27.737253Z"}, {"uuid": "82f84e8d-3b1b-44f8-980e-3a30c399ea78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76850", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtibhmda3t2c", "content": "CVE-2026-76850 - lmdeploy\nLMDeploy's disaggregated serving feature allows a malicious peer to inject code that can be executed by the server, potentially leading to unauthorized access or data tampering.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #CVE #infosec", "creation_timestamp": "2026-08-20T03:10:04.096849Z"}]}