Search: CVE-2026-15978

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-15978SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights High7.5EPSS 0.5%2026-07-30GCVE DatabaseCVE-2026-15978 SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights. EPSS 0.5%Vulnerability CWE-306 #ghsa-x6x2-r266-cx9p	GCVE Database	2026-07-30

Page 1 of 1