Skip to content
Threat Feed
Subscribe

Vendor

SGLang

3 briefs RSS
high advisory

Unbounded Memory Allocation in SGLang

SGLang versions up to 0.5.21 are vulnerable to a denial-of-service condition via an unbounded memory allocation issue in the /v1/audio/transcriptions endpoint.

SGLang +1 denial-of-service vulnerability code-injection rce
1r 4t updated
medium advisory

Unauthenticated Routing Table Poisoning in SGLang

SGLang versions up to 0.5.19 in disaggregation mode expose an unauthenticated PUT /route endpoint allowing remote attackers to poison KV transfer tables and redirect sensitive data.

SGLang routing-poisoning cve-2026-92972 denial-of-service vulnerability
1r 2t 1c updated
critical threat

CVE-2026-63030: Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-63030 is a critical unauthenticated remote code execution vulnerability affecting WordPress Core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1, allowing an unauthenticated attacker to execute arbitrary code via the WordPress REST API batch endpoint, potentially leading to complete website compromise.

exploited PoC WordPress Core 6.9.0 +51 wordpress rce web-vulnerability cve
2t 15c 8i updated