CVE-2026-27141

🗓️ 26 Feb 2026 18:50:31Reported by Alpine Linux Development TeamType

Missing nil check causes panic when 0x0a-0x0f HTTP/2 frames are sent.

Reporter	Title	Published	Views	Family All 281
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	12 Jun 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality (CVE-2026-41242, CVE-2026-4800) and denial of service (CVE-2026-27141)	21 May 202618:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in golang.org/x/net package bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging and IBM Fusion Content-Aware Storage	6 Jul 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	15 May 202613:21	–	ibm
ATTACKERKB	CVE-2026-27141	26 Feb 202618:50	–	attackerkb
BDU FSTEC	The vulnerability of the net/http2 library in the Go programming language, which allows attackers to trigger a service failure	3 Apr 202600:00	–	bdu_fstec
CBLMariner	CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2	13 Mar 202619:01	–	cbl_mariner
CBLMariner	CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2	9 May 202603:31	–	cbl_mariner
Chainguard	CVE-2026-27141 vulnerabilities	3 Mar 202607:17	–	cgr
Circl	CVE-2026-27141	28 Feb 202610:01	–	circl