Search: CVE-2026-15976

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2026-15976SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files Critical9.8EPSS 0.6%2026-07-30GCVE DatabaseCVE-2026-15976 SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files. EPSS 0.6%Vulnerability CWE-502 #ghsa-r344-357p-w9pp	GCVE Database	2026-07-30

Page 1 of 1