VU#281278: SGLang contains six different vulnerabilities including RCE, data exfiltration, and credential disclosure

CERT/CC advisories disclose multiple 2026 vulnerabilities across AI model serving, golf management/payment APIs, Electron packaging, scientific data services, residential gateways, identity platforms, and backup software. Impacts include unauthenticated and local remote code execution, SSRF, arbitrary file overwrite, credential and sensitive-data disclosure, authentication bypass, account takeover, broken object-level authorization, and privilege escalation. Several issues are remotely exploitable with little or no authentication, and SGLang reportedly had no available patch at publication.