Microsoft Security Response Center guidance
CBL-Mariner Releases
Vendor-listed releases
- 1.2.0-2
- 2.22.0-2
Vulnerability intelligence
CVE-2026-27141 and is rated High severity with a CVSS score of 7.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases
Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic