blog

• The Fourth Pickle: Unauthenticated Remote Code Execution in SGLang's Disaggregated Diffusion Server (CVE-2026-93088) 2026-09-22
• The Unguarded Setting: GPU-to-Browser Sandbox Escape in Chrome via GTK3's Gtk/Modules XSETTING (CVE-2026-76023) 2026-09-22