Skip to content
OpenAdvisories

Product · Zurich Instruments

LabOne Q

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-7584

    Arbitrary Code Execution via Unsafe Deserialization in LabOne Q

    The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization. Prior to the fix, this mechanism accepted arbitrary fully-qualified class names from the serialized d…

    Zurich Instruments LabOne Q