https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T03:21:13.271206+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112268 fkie_cve-2026-112268 2026-10-23T03:21:13.272407+00:00

sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes because /ha/* endpoints skip control-plane Admin role checks. Attackers can read cluster topology, write gossiped configuration, change global rate limits, and call POST /ha/shutdown to silently dissolve HA coordination.

 https://db.gcve.eu/vuln/ghsa-q6x7-8366-3wrx GHSA-q6x7-8366-3wrx 2026-10-23T03:21:13.272481+00:00

sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes because /ha/* endpoints skip control-plane Admin role checks. Attackers can read cluster topology, write gossiped configuration, change global rate limits, and call POST /ha/shutdown to silently dissolve HA coordination.