{"schema_version":"1","data":[{"id":40134,"advisory_id":"c4aa25e4-b4ef-4f9a-a7cd-096cd642c9b9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112267","source_published_at":"2026-10-19T13:55:16.522+00:00","published_at":"2026-10-25T10:58:29.32409+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-112267"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker","summary":"SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker's /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.","evidence":"cve:CVE-2026-112267","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-112267","aliases":["CVE-2026-112267"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.22"}],"packageURL":"pkg:pypi/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-19T19:36:30.282Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/45008","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/conn.py#L1157-L1181","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/decode.py#L1150-L1175","https://www.vulncheck.com/advisories/sglang-through-0.5.22-ssrf-via-bootstrap-host-and-bootstrap-port-on-decode-worker"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T19:36:21.462681Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/45008","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T19:36:30.282Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:16.522Z"}}},"related_cves":[{"value":"CVE-2026-112267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":39710,"advisory_id":"618abcb8-bb9e-4730-a015-ebebd3cbfab7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112269","source_published_at":"2026-10-19T13:55:17.954+00:00","published_at":"2026-10-25T10:51:13.328861+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-112269"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations","summary":"SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. Network-adjacent attackers can send many registrations with unique mooncake_session_id values and large nested-buffer frames to exhaust Prefill memory until the scheduler is OOM-killed.","evidence":"cve:CVE-2026-112269","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112269","aliases":["CVE-2026-112269"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"ADJACENT","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.22"}],"packageURL":"pkg:pypi/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-19T18:06:43.345Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/45012","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L2885-L2935","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L889-L909","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/utils.py#L47-L69","https://www.vulncheck.com/advisories/sglang-through-0.5.22-memory-exhaustion-via-unauthenticated-mooncake-decode-registrations"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112269","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T18:06:22.355686Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/45012","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T18:06:43.345Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:17.954Z"}}},"related_cves":[{"value":"CVE-2026-112269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":39032,"advisory_id":"c6d9a579-6e1e-480c-96ca-7224e15dd64b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112082","source_published_at":"2026-10-19T05:30:22.073+00:00","published_at":"2026-10-25T10:39:53.630831+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-112082"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service","summary":"A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.","evidence":"cve:CVE-2026-112082","products":[{"name":{"value":"SGLang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112082","aliases":["CVE-2026-112082"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.7,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":7.8,"vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"],"vendor":"sgl-project","modules":["Expert-Distribution Recording Endpoint"],"product":"SGLang","versions":[{"status":"affected","version":"0.5.0"},{"status":"affected","version":"0.5.1"},{"status":"affected","version":"0.5.2"},{"status":"affected","version":"0.5.3"},{"status":"affected","version":"0.5.4"},{"status":"affected","version":"0.5.5"},{"status":"affected","version":"0.5.6"},{"status":"affected","version":"0.5.7"},{"status":"affected","version":"0.5.8"},{"status":"affected","version":"0.5.9"},{"status":"affected","version":"0.5.10"},{"status":"affected","version":"0.5.11"},{"status":"affected","version":"0.5.12"},{"status":"affected","version":"0.5.13"},{"status":"affected","version":"0.5.14"},{"status":"affected","version":"0.5.15"},{"status":"affected","version":"0.5.16"},{"status":"affected","version":"0.5.17"},{"status":"affected","version":"0.5.18"},{"status":"affected","version":"0.5.19"}]}],"modified":"2026-10-19T16:45:48.503Z","provider":"cve","references":["https://vuldb.com/vuln/421761","https://vuldb.com/vuln/421761/cti","https://vuldb.com/cve/CVE-2026-112082","https://vuldb.com/submit/1009918","https://github.com/sgl-project/sglang/issues/42071","https://github.com/sgl-project/sglang/pull/42098","https://github.com/sgl-project/sglang/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112082","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T16:45:15.907364Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T16:45:48.503Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-19T05:30:22.073Z"}}},"related_cves":[{"value":"CVE-2026-112082","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":39013,"advisory_id":"9227ee30-ff2d-4c63-8e19-f097e4a42bb6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112270","source_published_at":"2026-10-19T13:55:18.694+00:00","published_at":"2026-10-25T10:39:41.57052+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-112270"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx","summary":"SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handle_staging_rsp() that lets unauthenticated network-adjacent attackers exhaust Prefill memory. Attackers can obtain the rank address from the /route endpoint and send STAGING_RSP messages with huge chunk_idx values under fresh room IDs, causing the scheduler to be OOM-killed.","evidence":"cve:CVE-2026-112270","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112270","aliases":["CVE-2026-112270"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":7.1,"attackVector":"ADJACENT","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.22"}],"packageURL":"pkg:pypi/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-19T16:34:55.350Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/45014","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/staging_handler.py#L505-L548","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L2885-L2935","https://www.vulncheck.com/advisories/sglang-through-0.5.22-memory-exhaustion-via-mooncake-staging-rsp-chunk-idx"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T15:35:58.138216Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T16:34:55.350Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:18.694Z"}}},"related_cves":[{"value":"CVE-2026-112270","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":39001,"advisory_id":"deaaecdd-790e-4ddb-932b-5614e18f9ba3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112083","source_published_at":"2026-10-19T05:45:18.578+00:00","published_at":"2026-10-25T10:39:32.392218+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-112083"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service","summary":"A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.","evidence":"cve:CVE-2026-112083","products":[{"name":{"value":"SGLang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-112083","aliases":["CVE-2026-112083"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"],"vendor":"sgl-project","modules":["Weight Exporter"],"product":"SGLang","versions":[{"status":"affected","version":"0.5.0"},{"status":"affected","version":"0.5.1"},{"status":"affected","version":"0.5.2"},{"status":"affected","version":"0.5.3"},{"status":"affected","version":"0.5.4"},{"status":"affected","version":"0.5.5"},{"status":"affected","version":"0.5.6"},{"status":"affected","version":"0.5.7"},{"status":"affected","version":"0.5.8"},{"status":"affected","version":"0.5.9"},{"status":"affected","version":"0.5.10"},{"status":"affected","version":"0.5.11"},{"status":"affected","version":"0.5.12"},{"status":"affected","version":"0.5.13"},{"status":"affected","version":"0.5.14"},{"status":"affected","version":"0.5.15"},{"status":"affected","version":"0.5.16"},{"status":"affected","version":"0.5.17"},{"status":"affected","version":"0.5.18"},{"status":"affected","version":"0.5.19"}]}],"modified":"2026-10-19T16:36:26.379Z","provider":"cve","references":["https://vuldb.com/vuln/421762","https://vuldb.com/vuln/421762/cti","https://vuldb.com/cve/CVE-2026-112083","https://vuldb.com/submit/1009919","https://github.com/sgl-project/sglang/issues/42073","https://github.com/sgl-project/sglang/pull/44314","https://github.com/sgl-project/sglang/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112083","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T15:46:38.788229Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T16:36:26.379Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-19T05:45:18.578Z"}}},"related_cves":[{"value":"CVE-2026-112083","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":38863,"advisory_id":"aed2ae9a-bb88-4aeb-88e9-79f9ea4c2dd4","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112266","source_published_at":"2026-10-19T13:55:15.822+00:00","published_at":"2026-10-25T10:37:18.916487+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-112266"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching","summary":"SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering prefix-matching abort logic that terminates all other clients' requests.","evidence":"cve:CVE-2026-112266","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-112266","aliases":["CVE-2026-112266"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.22"}],"packageURL":"pkg:pypi/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-19T14:21:40.361Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/45002","https://github.com/sgl-project/sglang/issues/41474","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/managers/scheduler.py#L5458-L5590","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/managers/tokenizer_manager.py#L2425-L2436","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/managers/tokenizer_manager.py#L2240-L2256","https://www.vulncheck.com/advisories/sglang-through-0.5.22-cross-request-abort-via-rid-prefix-matching"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-112266","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-19T14:21:16.166551Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/41474","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-19T14:21:40.361Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-19T13:55:15.822Z"}}},"related_cves":[{"value":"CVE-2026-112266","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":34621,"advisory_id":"7f271ddf-55dc-4ddb-b8c3-cae6a2caf9e5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109227","source_published_at":"2026-10-12T14:04:31.362+00:00","published_at":"2026-10-25T09:25:31.142492+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-109227"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing","summary":"SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits. Remote attackers can submit high-resolution videos to /v1/chat/completions on Qwen-VL deployments, and concurrent requests exhaust worker memory causing denial of service.","evidence":"cve:CVE-2026-109227","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109227","aliases":["CVE-2026-109227"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.21"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-18T11:46:21.400Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/43710","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/qwen_vl.py#L267-L306","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-through-0.5.21-memory-exhaustion-dos-via-qwen-vl-video-preprocessing"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109227","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-18T11:46:17.742988Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/43710","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-18T11:46:21.400Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T14:04:31.362Z"}}},"related_cves":[{"value":"CVE-2026-109227","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":34297,"advisory_id":"05605854-3d8c-444e-8a96-6aca8fff638f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-111392","source_published_at":"2026-10-16T17:38:44.867+00:00","published_at":"2026-10-25T09:20:19.02184+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-111392"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate","summary":"SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or corrupt victims' responses.","evidence":"cve:CVE-2026-111392","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-111392","aliases":["CVE-2026-111392"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"LOW"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0.5.13","versionType":"custom","lessThanOrEqual":"0.5.21"}],"packageURL":"pkg:github/sgl-project/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-16T19:24:54.109Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/44641","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/managers/tokenizer_manager.py#L1183-L1215","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/managers/io_struct.py#L205-L215","https://github.com/sgl-project/sglang/pull/44653","https://www.vulncheck.com/advisories/sglang-through-0.5.21-kv-cache-poisoning-via-mm-hashes-in-generate"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-111392","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-16T19:24:20.694655Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/44641","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T19:24:54.109Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-16T17:38:44.867Z"}}},"related_cves":[{"value":"CVE-2026-111392","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":32432,"advisory_id":"d07f26a6-48fb-4b46-8dd4-d9473c77a0ff","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-111391","source_published_at":"2026-10-16T11:41:52.009+00:00","published_at":"2026-10-25T08:49:18.076333+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-111391"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter","summary":"SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.","evidence":"cve:CVE-2026-111391","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-111391","aliases":["CVE-2026-111391"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":9.2,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0.5.10","versionType":"semver","lessThanOrEqual":"0.5.22"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org","defaultStatus":"unaffected"}],"modified":"2026-10-16T13:52:52.818Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/44188","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320","https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-0.5.10-through-0.5.22-code-injection-via-debug-dumper-filter"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-111391","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-16T13:48:49.265991Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-16T13:52:52.818Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-16T11:41:52.009Z"}}},"related_cves":[{"value":"CVE-2026-111391","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":28948,"advisory_id":"6ff2aabd-6714-4ae3-aa28-51a28589baed","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110809","source_published_at":"2026-10-14T23:30:21.13+00:00","published_at":"2026-10-25T07:51:04.790391+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-110809"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service","summary":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.","evidence":"cve:CVE-2026-110809","products":[{"name":{"value":"SGLang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-110809","aliases":["CVE-2026-110809"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"],"vendor":"sgl-project","modules":["Session Cleanup"],"product":"SGLang","versions":[{"status":"affected","version":"0.5.0"},{"status":"affected","version":"0.5.1"},{"status":"affected","version":"0.5.2"},{"status":"affected","version":"0.5.3"},{"status":"affected","version":"0.5.4"},{"status":"affected","version":"0.5.5"},{"status":"affected","version":"0.5.6"},{"status":"affected","version":"0.5.7"},{"status":"affected","version":"0.5.8"},{"status":"affected","version":"0.5.9"},{"status":"affected","version":"0.5.10"},{"status":"affected","version":"0.5.11"},{"status":"affected","version":"0.5.12"},{"status":"affected","version":"0.5.13"},{"status":"affected","version":"0.5.14"},{"status":"affected","version":"0.5.15"},{"status":"affected","version":"0.5.16"},{"status":"affected","version":"0.5.17"},{"status":"affected","version":"0.5.18"},{"status":"affected","version":"0.5.19"}]}],"modified":"2026-10-15T15:04:33.724Z","provider":"cve","references":["https://vuldb.com/vuln/420279","https://vuldb.com/vuln/420279/cti","https://vuldb.com/cve/CVE-2026-110809","https://vuldb.com/submit/1004356","https://github.com/sgl-project/sglang/issues/41470","https://github.com/sgl-project/sglang/pull/41483","https://gist.github.com/Yunzez/dbd254603fa2bc74358cb3647423d0ec#file-repro_sglang_session_replace_crash-py","https://github.com/sgl-project/sglang/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110809","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T14:50:15.728091Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T15:04:33.724Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-14T23:30:21.130Z"}}},"related_cves":[{"value":"CVE-2026-110809","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":28699,"advisory_id":"2b8b52d5-f5be-4ac6-8f0f-e21861e1db58","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110807","source_published_at":"2026-10-14T23:00:19.976+00:00","published_at":"2026-10-25T07:46:59.312147+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-110807"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"sgl-project SGLang generate Endpoint io_struct.py denial of service","summary":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.","evidence":"cve:CVE-2026-110807","products":[{"name":{"value":"SGLang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-110807","aliases":["CVE-2026-110807"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"],"vendor":"sgl-project","modules":["generate Endpoint"],"product":"SGLang","versions":[{"status":"affected","version":"0.5.0"},{"status":"affected","version":"0.5.1"},{"status":"affected","version":"0.5.2"},{"status":"affected","version":"0.5.3"},{"status":"affected","version":"0.5.4"},{"status":"affected","version":"0.5.5"},{"status":"affected","version":"0.5.6"},{"status":"affected","version":"0.5.7"},{"status":"affected","version":"0.5.8"},{"status":"affected","version":"0.5.9"},{"status":"affected","version":"0.5.10"},{"status":"affected","version":"0.5.11"},{"status":"affected","version":"0.5.12"},{"status":"affected","version":"0.5.13"},{"status":"affected","version":"0.5.14"},{"status":"affected","version":"0.5.15"},{"status":"affected","version":"0.5.16"},{"status":"affected","version":"0.5.17"},{"status":"affected","version":"0.5.18"},{"status":"affected","version":"0.5.19"}]}],"modified":"2026-10-15T13:26:17.848Z","provider":"cve","references":["https://vuldb.com/vuln/420278","https://vuldb.com/vuln/420278/cti","https://vuldb.com/cve/CVE-2026-110807","https://vuldb.com/submit/1004351","https://github.com/sgl-project/sglang/issues/41467","https://github.com/sgl-project/sglang/pull/41535","https://gist.github.com/Yunzez/28820d220c52de4810fd5fb2d1dcf409#file-repro_sglang_session_params_crash-py","https://github.com/sgl-project/sglang/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-110807","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T13:24:49.401161Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T13:26:17.848Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-14T23:00:19.976Z"}}},"related_cves":[{"value":"CVE-2026-110807","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":22879,"advisory_id":"080217b2-2f1b-4fc2-be6b-3e4fe2624dd9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109228","source_published_at":"2026-10-12T14:04:32.029+00:00","published_at":"2026-10-25T06:09:41.433385+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-109228"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters","summary":"SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_frames, max_tokens_per_frame and max_image_tokens in the video_url object. Attackers can set these values arbitrarily high so glm4v.py decodes every frame of high-resolution video at full size, exhausting worker memory and denying service.","evidence":"cve:CVE-2026-109228","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109228","aliases":["CVE-2026-109228"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.21"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-14T17:52:09.025Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/43705","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/entrypoints/openai/protocol.py#L592-L594","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/parser/conversation.py#L691","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/glm4v.py#L160-L167","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/glm4v.py#L400","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-through-0.5.21-resource-budget-bypass-via-glm-v-video-parameters"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109228","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-14T17:51:42.680233Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-14T17:52:09.025Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T14:04:32.029Z"}}},"related_cves":[{"value":"CVE-2026-109228","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":20578,"advisory_id":"0d7a968e-d77c-4048-9ea7-a7d1dba619e0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109226","source_published_at":"2026-10-12T14:04:30.674+00:00","published_at":"2026-10-25T05:30:59.987703+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-109226"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.21 Audio Decompression Amplification via load_audio","summary":"SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audio_url or audio_data inputs that expand into massive PCM buffers, exhausting worker memory and CPU for denial of service.","evidence":"cve:CVE-2026-109226","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109226","aliases":["CVE-2026-109226"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.21"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-13T18:24:26.414Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/43708","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.py#L1783","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.py#L1801-L1803","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/audio_from_video.py#L128","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/base_processor.py#L996","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-through-0.5.21-audio-decompression-amplification-via-load-audio"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109226","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T18:23:46.746453Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/43708","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T18:24:26.414Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T14:04:30.674Z"}}},"related_cves":[{"value":"CVE-2026-109226","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":20472,"advisory_id":"05e667e0-943f-4d02-a787-44d1a522be2d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109225","source_published_at":"2026-10-12T14:04:29.986+00:00","published_at":"2026-10-25T05:29:03.688496+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-109225"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload","summary":"SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio/transcriptions. Attackers can send concurrent large multipart uploads, which are fully read into memory before validation, to crash the HTTP/tokenizer worker and deny service.","evidence":"cve:CVE-2026-109225","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109225","aliases":["CVE-2026-109225"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.21"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-13T16:57:32.583Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/43709","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/entrypoints/http_server.py#L1847-L1871","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-through-0.5.21-memory-exhaustion-dos-via-v1-audio-transcriptions-upload"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109225","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T16:22:19.170383Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T16:57:32.583Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T14:04:29.986Z"}}},"related_cves":[{"value":"CVE-2026-109225","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":20308,"advisory_id":"f553f621-65c0-4b06-aa94-ba422ecbb7b3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-109229","source_published_at":"2026-10-12T14:04:32.719+00:00","published_at":"2026-10-25T05:26:12.978611+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-109229"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor","summary":"SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the generic image loader, exhausting worker memory during decoding.","evidence":"cve:CVE-2026-109229","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-109229","aliases":["CVE-2026-109229"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.21"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-10-13T15:19:28.915Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/43707","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/nano_nemotron_vl.py#L82","https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.py#L1952-L1961","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-through-0.5.21-decompression-bomb-dos-via-nanonemotronvlimageprocessor"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-109229","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-13T15:19:00.434077Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/43707","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-13T15:19:28.915Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-10-12T14:04:32.719Z"}}},"related_cves":[{"value":"CVE-2026-109229","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":15720,"advisory_id":"c99e4a25-156f-452a-88a6-5fdd38b3bfc5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93034","source_published_at":"2026-10-08T14:00:09.084+00:00","published_at":"2026-10-25T01:04:46.122615+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-93034"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-93034","summary":"SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG_USE_PICKLE_IPC is disabled, and becomes remotely exploitable if data-parallel attention is enabled with a non-loopback --dist-init-addr setting.","evidence":"cve:CVE-2026-93034","products":[{"name":{"value":"SGLang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-93034","aliases":["CVE-2026-93034"],"metrics":[],"affected":[{"vendor":"SGLang","product":"SGLang","versions":[{"status":"affected","version":"0","versionType":"custom","lessThanOrEqual":"v0.5.20"}]}],"modified":"2026-10-08T20:22:35.805Z","provider":"cve","references":["https://github.com/sgl-project/sglang/tree/main","https://m00dy.sh/notes/disabling-pickle-did-not-remove-pickle?palette=mineral"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-93034","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T20:22:09.915843Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-502","description":"CWE-502 Deserialization of Untrusted Data"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T20:22:35.805Z"}}],"cna":{"orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc","dateUpdated":"2026-10-08T14:00:09.084Z"}}},"related_cves":[{"value":"CVE-2026-93034","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12282,"advisory_id":"fcb99295-24ef-47b4-9364-cc8dd313826b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105245","source_published_at":"2026-10-05T06:30:14.062+00:00","published_at":"2026-10-25T00:05:08.077095+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-105245"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission","summary":"A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the file python/sglang/srt/entrypoints/http_server.py of the component HTTP Endpoint. Such manipulation of the argument api_key leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.","evidence":"cve:CVE-2026-105245","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-105245","aliases":["CVE-2026-105245"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}},{"cvssV3_1":{"version":"3.1","baseScore":3.7,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C"}},{"cvssV3_0":{"version":"3.0","baseScore":3.7,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C"}},{"cvssV2_0":{"version":"2.0","baseScore":2.6,"vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C"}}],"affected":[{"cpes":["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"],"vendor":"sgl-project","modules":["HTTP Endpoint"],"product":"sglang","versions":[{"status":"affected","version":"0.5.0"},{"status":"affected","version":"0.5.1"},{"status":"affected","version":"0.5.2"},{"status":"affected","version":"0.5.3"},{"status":"affected","version":"0.5.4"},{"status":"affected","version":"0.5.5"},{"status":"affected","version":"0.5.6"},{"status":"affected","version":"0.5.7"},{"status":"affected","version":"0.5.8"},{"status":"affected","version":"0.5.9"},{"status":"affected","version":"0.5.10"},{"status":"affected","version":"0.5.11"},{"status":"affected","version":"0.5.12"},{"status":"affected","version":"0.5.13"},{"status":"affected","version":"0.5.14"},{"status":"affected","version":"0.5.15"},{"status":"affected","version":"0.5.16"},{"status":"affected","version":"0.5.17"},{"status":"affected","version":"0.5.18"},{"status":"affected","version":"0.5.19"},{"status":"affected","version":"0.5.20"},{"status":"affected","version":"0.5.21"}]}],"modified":"2026-10-07T20:42:46.194Z","provider":"cve","references":["https://vuldb.com/vuln/413451","https://vuldb.com/vuln/413451/cti","https://vuldb.com/cve/CVE-2026-105245","https://vuldb.com/submit/975910","https://github.com/sgl-project/sglang/issues/30166","https://github.com/sgl-project/sglang/pull/30343","https://github.com/sgl-project/sglang/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-105245","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:42:36.592062Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:42:46.194Z"}}],"cna":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-10-05T06:30:14.062Z"}}},"related_cves":[{"value":"CVE-2026-105245","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":3880,"advisory_id":"dbc1c3d2-dcda-4afb-ac68-c3badde0e71a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102634","source_published_at":"2026-09-29T16:04:17.381+00:00","published_at":"2026-10-24T21:42:44.998752+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-102634"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room","summary":"SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values to crash scheduler processes or hang other users' requests until transfer timeout.","evidence":"cve:CVE-2026-102634","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102634","aliases":["CVE-2026-102634"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.20"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-09-29T17:33:09.537Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/40125","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/conn.py#L392-L393","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/mooncake/conn.py#L2760-L2764","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/decode.py#L942","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/managers/io_struct.py#L281","https://github.com/sgl-project/sglang","https://www.vulncheck.com/advisories/sglang-through-0.5.20-denial-of-service-via-duplicate-bootstrap-room"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102634","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T17:33:03.800231Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/40125","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T17:33:09.537Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-29T16:04:17.381Z"}}},"related_cves":[{"value":"CVE-2026-102634","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":1711,"advisory_id":"9256664d-7138-4140-8635-2b309e4ef55b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93838","source_published_at":"2026-09-18T19:06:03.899+00:00","published_at":"2026-10-24T21:06:12.191896+00:00","extraction_method":"structured","technologies":["core-cve","sglang"],"cve_ids":["CVE-2026-93838"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx","summary":"SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_REQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame with an extremely large chunk_idx value, causing the scheduler to allocate memory until the system runs out and terminates the process.","evidence":"cve:CVE-2026-93838","products":[{"name":{"value":"sglang","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-93838","aliases":["CVE-2026-93838"],"metrics":[{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"NONE"}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"repo":"https://github.com/sgl-project/sglang","vendor":"sgl-project","product":"sglang","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"0.5.20"}],"packageURL":"pkg:pypi/sglang","collectionURL":"https://pypi.org/project/sglang","defaultStatus":"unaffected"}],"modified":"2026-09-24T14:23:13.073Z","provider":"cve","references":["https://github.com/sgl-project/sglang/issues/39764","https://github.com/sgl-project/sglang","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/staging_handler.py#L781","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/staging_handler.py#L848-L860","https://github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/conn.py#L1636-L1640","https://www.vulncheck.com/advisories/sglang-through-0.5.20-unbounded-memory-allocation-via-staging-req-chunk-idx"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-93838","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-18T20:09:38.130553Z"}}}],"references":[{"url":"https://github.com/sgl-project/sglang/issues/39764","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-18T20:09:44.508Z"}}],"cna":{"orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","shortName":"VulnCheck","dateUpdated":"2026-09-24T14:23:13.073Z"}}},"related_cves":[{"value":"CVE-2026-93838","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":40134,"next_before":1711}