SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads without authentication...

CVE-2026-42536

CVE-2026-42536 is a heap-based buffer overflow in the mod_xml2enc module of Apache HTTP Server (versions 2.4.0 through 2.4.67 ), triggered via the xml2StartParse function when processing untrusted content. Per FSTEC BDU, a remote attacker can exploit this to cause a service failure ; CISA SSVC ra...