CVE-2026-110809Proof of concept (PoC) published · CISA
sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
CVSS score
5.3
EPSS probability
%0.3
Risk score
0.0
Published
22 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-93688
SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
S
Patch status unknownEPSS %1
8.2
CVE-2026-93838
SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx
S
Patch status unknownEPSS %1
8.7
CVE-2026-102634
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
S
Patch status unknownEPSS %1
8.7
CVE-2026-109228
SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
S
Patch status unknownEPSS %0
8.8
CVE-2026-92972
SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint
S
Patch status unknownEPSS %0
8.7
CVE-2026-109226
SGLang through 0.5.21 Audio Decompression Amplification via load_audio
S
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-110809"