All 3 CVE vulnerabilities found in FedML, with AI-generated Chinese analysis, references, and POCs.
Vendor: FedML-AI
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-90614 | FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deserialization CWE-502 | 6.3 | Medium | 2026-09-14 |
| CVE-2026-5536 | FedML-AI FedML gRPC server grpc_server.py sendMessage deserialization CWE-502 | 7.3 | High | 2026-04-05 |
| CVE-2026-5535 | FedML-AI FedML MQTT Message FileUtils.java path traversal CWE-22 | 4.3 | Medium | 2026-04-05 |
All 3 known CVE vulnerabilities affecting FedML with full Chinese analysis, references, and POCs where available.