CVE-2026-5760 2

Vulnerability (CVE)

SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

A critical command injection flaw in SGLang, tracked as CVE-2026-5760 and scored 9.8 out of 10.0, allows remote code execution through the "/v1/rerank" endpoint when a victim loads a malicious GGUF model file whose crafted tokenizer.chat_template parameter...

Vulnerabilities & Patching

⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More

Cyber Risks The Hacker News

A new Lua-based malware framework called fast16, dating back to 2005, was built to target high-precision calculation software and subtly alter results, and analysis suggests it was active at least five years before Stuxnet. It is not known whether fast16...

Zero-Days & Exploits