The vulnerability of the HTTP/2 implementation in the Go programming language allows attackers to bypass existing security mechanisms.

🗓️ 03 Apr 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

The Go HTTP/2 vulnerability enables remote bypass of security due to authentication flaws.

Reporter	Title	Published	Views	Family All 1000
FreeBSD	traefik -- Multiple vulnerabilities	26 Mar 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.	22 Sep 202607:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in google.golang.org/grpc-v1.62.0	28 Apr 202621:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	27 Apr 202613:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Authorization Bypass.	1 Sep 202614:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Support for Hyperledger Fabric is vulnerable to CVE-2026-33186	25 Jun 202618:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container backup and restore is vulnerable to authorization bypass (CVE-2026-33186)	7 May 202613:37	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	7 Sep 202622:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	31 Jul 202622:38	–	ibm

Vulners

Node

OR

grafana_labs grafana_alloyMatch1.14.1

go goRange<1.79.3

Source	Link
github	www.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3
github	www.github.com/grafana/alloy/releases
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-33186
github	www.github.com/JohannesLks/CVE-2026-33186
altsp	www.altsp.su/obnovleniya-bezopasnosti/
redos	www.redos.red-soft.ru/support/secure/
web	www.web.nvd.nist.gov/view/vuln/detail

01 Sep 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 39.1

CVSS 29.4

EPSS0.01625

go language protocol two vulnerability authentication weakness remote bypass security mechanisms