CVE•Published 2026-06-17•Modified 2026-06-17•1 article on news•4 live references•NVD data
CVE-2026-3490
Vulnerability data via NVD (ingested)
CVSS v3.1
10.0
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS percentile
—
Weaknesses (CWE)
Description
picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.system, builtins.exec, or subprocess.call to achieve remote code execution.
Timeline
Published 2026-06-17
Modified 2026-06-17
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2026-3490Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-3490Censys host search filtered to this CVE id.
grep.app
CVE-2026-3490Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-3490GitHub code search for direct mentions.
Google dork
"CVE-2026-3490" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-34908 repos
Mr-xn/Penetration_Testing_POCHTML
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…
xairy/linux-kernel-exploitationunknown
A collection of links related to Linux kernel security and exploitation
0xor0ne/awesome-listunknown
Cybersecurity oriented awesome list
bsauce/kernel-exploit-factoryC
Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.
bsauce/kernel-security-learningC
Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.
NoobieDog/TPM-Sniffingunknown
A repo for TPM sniffing greatness
BishopFox/CVE-2026-34908-checkPython
Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908
ekkoo-z/KubeTrailGo
KubeTrail（云迹） 是一个面向 Kubernetes 授权红队评估与防御验证的容器内态势感知、攻击面发现和 AI 辅助攻防编排工具