x-net-http2 up to 0.50.x HTTP/2 Frame null pointer dereference

Summaryinfo

A vulnerability was found in x-net-http2 up to 0.50.x and classified as problematic. This issue affects some unknown processing of the component HTTP2 Frame Handler. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-27141. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in x-net-http2 up to 0.50.x and classified as problematic. Affected by this issue is an unknown code of the component HTTP2 Frame Handler. The manipulation with an unknown input leads to a null pointer dereference vulnerability. Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Impacted is availability. CVE summarizes:

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

This vulnerability is handled as CVE-2026-27141 since 02/17/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 300177 (Linux Distros Unpatched Vulnerability : CVE-2026-27141), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 0.51.0 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (300177) and CERT Bund (WID-SEC-2026-1618). Once again VulDB remains the best source for vulnerability data.

Affected

• Splunk Splunk Enterprise

Productinfo

Name

• x-net-http2

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5
• 0.6
• 0.7
• 0.8
• 0.9
• 0.10
• 0.11
• 0.12
• 0.13
• 0.14
• 0.15
• 0.16
• 0.17
• 0.18
• 0.19
• 0.20
• 0.21
• 0.22
• 0.23
• 0.24
• 0.25
• 0.26
• 0.27
• 0.28
• 0.29
• 0.30
• 0.31
• 0.32
• 0.33
• 0.34
• 0.35
• 0.36
• 0.37
• 0.38
• 0.39
• 0.40
• 0.41
• 0.42
• 0.43
• 0.44
• 0.45
• 0.46
• 0.47
• 0.48
• 0.49
• 0.50

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion