CyberRota
Back to database

CVE-2026-7304

CRITICAL · CVSS 9.8 EPSS 0.58% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-18 · Last synced: 2026-06-17

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution
GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-7304
Severity
CRITICAL
CVSS
9.8
EPSS
0.58%

Original NVD Description

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.