PULSE
LIVE36signals / 24h
ES
FEED
ransomgenesis reclama a Boyum IT Solutions (HOT!) · DK · Technologyransomgenesis reclama a C.A. Walker Construction · US · Manufacturingransomqilin reclama a Audio Precision, Inc · US · Technologyransomgammax reclama a AguAseo · CO · Energy & Utilitiesransomsecurotrop reclama a MAG USA Inc · US · Manufacturingransomsection9 reclama a And where does the newborn go from here? The net is vast and infinite. · Not Foundransomincransom reclama a PARTNERED HEALTH GROUP · AU · Healthcareransomcmdorganization reclama a Contact Group · AU · Professional Servicesransomincransom reclama a sslf.local · US · Not Foundransomqilin reclama a TenSparrows · US · Not Foundransomcmdorganization reclama a Collge Mont Notre-Dame de Sherbrooke · CA · Educationransomqilin reclama a Db Tarimsal Enerji · TR · Agriculture and Food Productionransomcmdorganization reclama a Rondout Electric · US · Energy & Utilitiesransomqilin reclama a Byonyks · US · Technologyransomgenesis reclama a Boyum IT Solutions (HOT!) · DK · Technologyransomgenesis reclama a C.A. Walker Construction · US · Manufacturingransomqilin reclama a Audio Precision, Inc · US · Technologyransomgammax reclama a AguAseo · CO · Energy & Utilitiesransomsecurotrop reclama a MAG USA Inc · US · Manufacturingransomsection9 reclama a And where does the newborn go from here? The net is vast and infinite. · Not Foundransomincransom reclama a PARTNERED HEALTH GROUP · AU · Healthcareransomcmdorganization reclama a Contact Group · AU · Professional Servicesransomincransom reclama a sslf.local · US · Not Foundransomqilin reclama a TenSparrows · US · Not Foundransomcmdorganization reclama a Collge Mont Notre-Dame de Sherbrooke · CA · Educationransomqilin reclama a Db Tarimsal Enerji · TR · Agriculture and Food Productionransomcmdorganization reclama a Rondout Electric · US · Energy & Utilitiesransomqilin reclama a Byonyks · US · Technology
← All CVEs
CVE WatchJul 30, 2026

CVE-2026-15976

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_wei

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 30, 2026 · Last modified: Jul 30, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files.

Official references
Related CVEs

No related CVEs by CWE or product.