P
Vendor security profile
Project-MONAI
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit6
Patch rate%11
Avg. CVSS8.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
7
2
CVE KEV
CVE severity distribution
9toplam CVE
High9 (100%)
Patch and exploitation view
%11
Verified patch
%0
CISA KEV
%67
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
7.0
CVE-2026-109361
MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path
P
Patch verified
7.7
CVE-2026-109360
MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP
P
Patch status unknown
8.8
CVE-2026-100846
MONAI before 1.5.2 Remote Code Execution via Pickle Deserialization
P
Patch status unknownEPSS %0
8.5
CVE-2026-100845
MONAI before 1.6.0 Remote Code Execution via NumpyReader
P
Patch status unknownEPSS %0
8.6
CVE-2026-100844
MONAI before 1.6.0 OS Command Injection via dataset_name_or_id
P
Patch status unknownEPSS %1
8.5
CVE-2026-100843
MONAI before 1.6.0 Remote Code Execution via algo_from_pickle
P
Patch status unknownEPSS %0
7.3
CVE-2026-100842
MONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute Chains
P
Patch status unknownEPSS %0
8.5
CVE-2026-100841
MONAI through 1.6.0 PersistentDataset Remote Code Execution via Pickle Cache
P
Patch status unknownEPSS %0
8.5
CVE-2026-100840
MONAI through 1.6.0 Remote Code Execution via bundle configuration
P
Patch status unknownEPSS %0