{"vulnerability": "cve-2026-93348", "sightings": [{"uuid": "50cda662-7094-4229-9917-6b26616dce7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eyybvfanmucry", "content": "CVE-2026-93348 - Unsloth Zoo Code Injection via model_type in config.json\nCVE ID : CVE-2026-93348\n \n Published : Sept. 28, 2026, 4:17 p.m. | 15\u00a0minutes ago\n \n Description : Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, co...", "creation_timestamp": "2026-09-28T17:12:33.129235Z"}, {"uuid": "b73c283a-1484-4024-bac4-fdff2576ec15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93348", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwpk66sxmv25", "content": "CVE-2026-93348 - unsloth-zoo\nIf you load a model into Unsloth Zoo or Unsloth, a specially crafted configuration file can cause the program to run any code the attacker includes. This happens because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unslothzoo #unslothai #CVE #infosec", "creation_timestamp": "2026-09-30T04:50:04.366169Z"}]}