Executive brief
D-Tale: Remote Code Execution through redis/shelf storage
Affected products
- PyPI dtale
Junglewise Threat Intelligence
CVE-2026-35052: PYSEC-2026-2460 - D-Tale: Remote Code Execution through redis/shelf storage
CVE-2026-35052 · Severity: medium · CVSS 4 · Published 2026-07-13
Technologies: dtale (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2461 - D-Tale affected by Remote Code Execution through the /save-column-filter endpoint
- PYSEC-2026-1320 - D-Tale allows Remote Code Execution through the Custom Filter Input
- PYSEC-2026-1321 - D-Tale Command Execution Vulnerability
- PYSEC-2026-1323 - D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
- PYSEC-2026-1319 - D-Tale server-side request forgery through Web uploads