Description
A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/scripts/analyse_cache.py of the component Cache Handler. This manipulation of the argument sys.argv[1] causes deserialization. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AD-Security | AD_Miner | 1.9.0 | — |
References
- VDB-376310 | AD-Security AD_Miner Cache analyse_cache.py request_a deserialization vdb-entry technical-description
- VDB-376310 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-14723 | CVE Analysis and Report third-party-advisory
- Submit #847672 | AD-Security AD_Miner 1.9.0 Unsafe Deserialization / Arbitrary Code Execution third-party-advisory
- https://github.com/AD-Security/AD_Miner/issues/238 issue-tracking
- https://github.com/AD-Security/AD_Miner/pull/239 issue-tracking patch
- https://github.com/AD-Security/AD_Miner/ product