Buffer Overflow Vulnerability in Robur Albatross Console
CVE-2026-96609

7.1HIGH

Key Information:

Vendor

Robur

Status
Vendor
CVE Published:
23 September 2026

What is CVE-2026-96609?

An identified vulnerability in Robur Albatross versions 1.0.0 through 2.7.1 allows an uncontrolled use of the ring buffer, potentially leading to an infinite loop in the console due to excessive log output. This issue can be exploited by users capable of sending console subscription commands to unikernels, but it is secured against unauthorized access. A patch has been released in version 2.7.2 to mitigate this risk and ensure system integrity.

Affected Version(s)

Albatross 1.0.0 < 2.7.2

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.