Critical Vulnerabilities Enable Unauthenticated Remote Code Execution in ADAudit Plus and SGLang

Key Findings

• ManageEngine ADAudit Plus CVE-2026-6516 combines authentication bypass and path traversal in Agent APIs to enable unauthenticated remote code execution with CVSS 10.0
• Patch available since April 2026 in build 8606, but exploitation status remains unconfirmed
• SGLang CVE-2026-14890 exposes LLM inference servers through unpatched pickle deserialization flaw rated CVSS 9.1
• SGLang maintainers have not responded to CERT/CC coordination efforts, leaving no official fix available
• Both vulnerabilities require immediate attention due to critical infrastructure exposure and lack of confirmed patches in deployment

Background

ADAudit Plus serves as the audit backbone for Active Directory environments, running agents across domain controllers, file servers, and workstations. Its role makes the audit server itself an attractive target. A successful compromise places an attacker adjacent to the directory infrastructure it monitors.

SGLang powers production deployments of major language models including Qwen, DeepSeek, and Mistral. It implements OpenAI API compatibility, embedding itself into AI stacks across enterprises. A compromised inference server exposes model weights, training data, user prompts, and underlying GPU infrastructure.

ManageEngine ADAudit Plus CVE-2026-6516

The vulnerability chains two separate weaknesses in the Agent APIs. One permits authentication bypass, the other permits path traversal. ManageEngine has released no detailed technical breakdown, but the outcome is clear: an unauthenticated attacker can achieve remote code execution by combining both flaws.

The flaw affects all ADAudit Plus builds below 8606. Researcher Linhlt of VCB discovered and reported it. Build 8606, released April 17, 2026, contains the fix.

Patching ADAudit Plus

Three upgrade steps close the gap. Apply the service pack to reach build 8606. Upgrade Windows agents running anything older than 7060. Upgrade all Mac agents regardless of current version.

Check agent versions in the web console by navigating to Configuration, then Agent Management, then Manage. ManageEngine's advisory for CVE-2026-6516 provides step-by-step upgrade instructions.

The real question is not whether a patch exists, but whether your instance actually took the update. No exploitation has been confirmed in the wild yet, but the window for deployment remains open.

SGLang CVE-2026-14890

CERT/CC published vulnerability note VU#326070 on July 16, 2026. The flaw affects SGLang versions 0.5.14 and below and carries a CVSS score of 9.1.

The trouble originates in the expert-parallel backup subsystem. When enabled, it opens a ZeroMQ PULL socket on a routable network interface. That socket carries no authentication and applies no deserialization safeguards. Anything reaching the endpoint can send data directly into Python's pickle module.

Pickle executes code during deserialization by design. An attacker with network access therefore gains code execution, requiring no credentials.

Unpatched Status and Familiar Patterns

CERT/CC notes that no response came from SGLang maintainers during coordination efforts. No official fix has shipped.

This represents SGLang's third pickle deserialization flaw. CVE-2026-7301 and CVE-2026-7304 hit the multimodal scheduler and logit processor respectively. The maintainers have begun refactoring toward msgpack, but that work remains incomplete.

Mitigation Without a Patch

Two conditions decide exposure: the expert-parallel backup subsystem must be running, and the service must be network reachable. The environment variable SGLANG_USE_PICKLE_IPC still defaults to true.

Since no patch exists, network controls become critical. Keep SGLang interfaces off untrusted networks entirely. Apply network segmentation and access controls around the endpoints. Set SGLANG_USE_PICKLE_IPC to false in environ.py.

No public exploit or in-the-wild abuse has been confirmed, but the low bar for attackers makes this vulnerability worth addressing today.

Sources

• https://securityonline.info/adaudit-plus-cve-2026-6516/
• https://securityonline.info/sglang-rce-cve-2026-14890/