CVE-2026-27141

HIGH

HTTP/2 Server - DoS

Title source: llm

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

CVSS v3 7.5

EPSS 0.0006

EPSS Percentile 19.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476

Status draft

Published Feb 26, 2026

Tracked Since Feb 27, 2026