CVE-2026-23654: Microsoft Zero-Shot-Scfoundation

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network.

Affected products

• Microsoft Zero-Shot-Scfoundation: before 0.1.1 (fixed in 0.1.1)

Published 2026-03-10. Last modified 2026-06-17.