CVE-2026-3059

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 18, 2026

Last Seen

October 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE and Path Traversal Vulnerabilities Found in SGLang Framework69.0

Three vulnerabilities have been identified in the SGLang framework, including two remote code execution (RCE) vulnerabilities and one path traversal vulnerability. These flaws allow unauthenticated attackers to execute arbitrary code or write files on affected systems. The vulnerabilities are tracke...

Critical RCE Vulnerability in SGLang LLM Framework Disclosed69.0

SGLang has a critical remote code execution vulnerability, tracked as CVE-2026-93034, due to its ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() without type allowlisting or authentication. This vulnerability persists even when the SGLANG_USE_PICKLE_IPC fl...