LabOne Q vulnerabilities

1 known vulnerability in LabOne Q from Zurich Instruments. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  LabOne Q: Deserialization of Untrusted Data

  CVE-2026-7584May 1, 2026Zurich Instruments

  The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization. Prior to the fix, this mechanism accepted arbitrary fully-qualified class names from the serialized da