Deserialization Vulnerability in AD-Security AD_Miner Affects Cache Handler Functionality
CVE-2026-14723
4.8MEDIUM
What is CVE-2026-14723?
A vulnerability has been identified in AD-Security's AD_Miner version 1.9.0, specifically within the request_a function located in the analyse_cache.py file. This issue arises from improper handling of the sys.argv[1] argument in the cache handler, leading to unsafe deserialization. The vulnerability allows attackers to execute malicious code locally by manipulating the input parameters. The development team has submitted a pull request for a fix, which is currently pending acceptance.
Affected Version(s)
AD_Miner 1.9.0
