CVE-2026-14723 PUBLISHED

A vulnerability was determined in AD-Security AD_Miner 1.9.0. Affected is the function request_a of the file ad_miner/scripts/analyse_cache.py of the component Cache Handler. This manipulation of the argument sys.argv[1] causes deserialization. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.

• Dem00000 (VulDB User) reporter
• VulDB CNA Team coordinator

• VDB-376310 | AD-Security AD_Miner Cache analyse_cache.py request_a deserialization
• VDB-376310 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-14723 | CVE Analysis and Report
• Submit #847672 | AD-Security AD_Miner 1.9.0 Unsafe Deserialization / Arbitrary Code Execution
• https://github.com/AD-Security/AD_Miner/issues/238
• https://github.com/AD-Security/AD_Miner/pull/239
• https://github.com/AD-Security/AD_Miner/

• Deserialization CWE
• Improper Input Validation CWE