CVE-2026-5760

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 20, 2026

Last Seen

April 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability Discovered in SGLang Framework via GGUF Models69.8

A remote code execution vulnerability has been identified in the SGLang framework, specifically affecting the reranking endpoint (/v1/rerank) and tracked as CVE-2026-5760. This flaw allows attackers to exploit maliciously crafted GGUF model files containing Jinja2 templates, leading to the execution...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability Discovered in SGLang Framework via GGUF Models

Apr 21·7 sources

Related Entities

Zero-day Exploit Remote Code Execution OpenAI CWE-94 - Code Injection T1203 - Exploitation for Client Execution T1221 - Template Injection T1059 - Command and Scripting Interpreter SGLang GGUF Mistral Qwen Skywork

CVE-2026-5760

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical RCE Vulnerability Discovered in SGLang Framework via GGUF Models

Related Articles (4)

Hackers Could Weaponize GGUF Models to Achieve RCE on SGLang Inference Servers

Malicious GGUF Models Could Trigger Remote Code Execution on SGLang Servers

SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

VU#915947: SGLang is vulnerable to remote code execution when rendering chat templates from a model file

Related Entities