Advisories · Technology

SGLang.

Every CVE that names SGLang among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93034 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-93034
- SGLang
- Insecure deserialization
Not analysed yet 8 Oct 2026
CVE-2026-94570 CVE record

CVSS 5.9 Medium

CVE-2026-94570
- SGLang
- CWE-1287
Not analysed yet 22 Sept 2026
CVE-2026-93088 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-93088
- SGLang
- Insecure deserialization
Not analysed yet 22 Sept 2026
CVE-2026-86793 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-86793
- SGLang
- Code injection
Not analysed yet 11 Sept 2026
CVE-2026-15969 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-15969
- SGLang
- Insecure deserialization
Not analysed yet 30 Jul 2026
CVE-2026-15978 CVE record

CVSS 7.5 High

CVE-2026-15978
- SGLang
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-15977 CVE record

CVSS 7.5 High

CVE-2026-15977
- SGLang
- Hard-coded credentials
Not analysed yet 30 Jul 2026
CVE-2026-15976 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-15976
- SGLang
- Insecure deserialization
Not analysed yet 30 Jul 2026
CVE-2026-15974 CVE record

CVSS 6.5 Medium

CVE-2026-15974
- SGLang
- Server-side request forgery (SSRF)
Not analysed yet 30 Jul 2026
CVE-2026-15971 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-15971
- SGLang
- Code injection
Not analysed yet 30 Jul 2026
CVE-2026-14890 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

CVE-2026-14890
- SGLang
- Insecure deserialization
Not analysed yet 16 Jul 2026
CVE-2026-5760 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

CVE-2026-5760
- SGLang
- Code injection
Not analysed yet 20 Apr 2026