Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rclone | Jun 18, 2026 | Feb 26, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 26, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.3Upgrade Splunk Enterprise to version 9.4.11Upgrade Splunk Enterprise to version 10.0.6Upgrade Splunk Enterprise to version 9.3.12 | Jul 30, 2026 | Feb 26, 2026 |
| Ubuntu | — | Upgrade adsys | Jun 16, 2026 | Jun 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub