CVE-2026-7304

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 18, 2026

Last Seen

July 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE and Path Traversal Vulnerabilities Found in SGLang Framework69.0

Three vulnerabilities have been identified in the SGLang framework, including two remote code execution (RCE) vulnerabilities and one path traversal vulnerability. These flaws allow unauthenticated attackers to execute arbitrary code or write files on affected systems. The vulnerabilities are tracke...

Critical Remote Code Execution Vulnerabilities in SGLangs Runtime66.6

Two critical vulnerabilities, CVE-2026-7304 and CVE-2026-7301, have been identified in the SGLangs multimodal generation runtime. Both vulnerabilities, published on 2026-05-18, allow unauthenticated remote code execution (RCE) under specific conditions. CVE-2026-7304 exploits the --enable-custom-log...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (2)

Critical RCE and Path Traversal Vulnerabilities Found in SGLang Framework

May 18·2 sources

Critical Remote Code Execution Vulnerabilities in SGLangs Runtime

Jul 16·2 sources

Related Entities

Zero-day Exploit Remote Code Execution CVE-2026-3059 CVE-2026-3060 CVE-2026-7301 CVE-2026-7302 Cwe-502 - Deserialization Of Untrusted Data CWE-22 - Path Traversal Dill Python Path Traversal

CVE-2026-7304

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (2)

Critical RCE and Path Traversal Vulnerabilities Found in SGLang Framework

Critical Remote Code Execution Vulnerabilities in SGLangs Runtime

Related Articles (2)

CVE-2026-7304

VU#777338: SGLang contains two remote code execution and one path traversal vulnerability

Related Entities