PT-2026-22177 · Red Os · Red Os

Aknuds1 · Publicado 2026-02-26 · Atualizado 2026-06-15 · CVE-2026-27141

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Nome do Software Vulnerável e Versões Afetadas versões anteriores a 2026-27141

Descrição A ausência de uma verificação de nil permite que um servidor entre em pânico ao receber frames HTTP/2 específicos, especificamente aqueles na faixa de 0x0a a 0x0f. Não há incidentes reportados no mundo real ou estimativas de quantidade de dispositivos afetados relacionados a este problema. A vulnerabilidade está relacionada à análise de frames HTTP/2.

Recomendações Atualmente, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

AZL-78629

AZL-78653

AZL-78656

AZL-78659

AZL-78662

AZL-78680

BDU:2026-04597

CLEANSTART-2026-AE87452

CLEANSTART-2026-AQ75465

CLEANSTART-2026-DF22934

CLEANSTART-2026-DS01292

CLEANSTART-2026-FB05615

CLEANSTART-2026-FQ05951

CLEANSTART-2026-FR97108

CLEANSTART-2026-FX27781

CLEANSTART-2026-GB46352

CLEANSTART-2026-HA09227

CLEANSTART-2026-LB23787

CLEANSTART-2026-LD15132

CLEANSTART-2026-MJ36694

CLEANSTART-2026-MK01488

CLEANSTART-2026-MK40719

CLEANSTART-2026-MQ21261

CLEANSTART-2026-MT27167

CLEANSTART-2026-MU81308

CLEANSTART-2026-OI10284

CLEANSTART-2026-OS42112

CLEANSTART-2026-PE63912

CLEANSTART-2026-PZ85180

CLEANSTART-2026-SM37781

CLEANSTART-2026-UG20989

CLEANSTART-2026-UJ59341

CLEANSTART-2026-UM45661

CLEANSTART-2026-UY60586

CLEANSTART-2026-VS17175

CLEANSTART-2026-VZ08395

CLEANSTART-2026-WN01990

CVE-2026-27141

GO-2026-4559

OPENSUSE-SU-2026:10294-1

OPENSUSE-SU-2026:10313-1

OPENSUSE-SU-2026:10385-1

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2026:0757-1

USN-8430-1

Produtos afetados

Red Os

Referências · 375

• https://github.com/golang/go/issues/77652 · Nota
• https://github.com/grafana/alloy/releases · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MQ21261.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DF22934.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UM45661.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WN01990.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UG20989.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FQ05951.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LD15132.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AE87452.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HA09227.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UJ59341.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FX27781.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FR97108.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MJ36694.json · Nota