CVE-2026-27141 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 40.62%

Debian Releases

Debian Product

Codename

golang-golang-x-net

bookworm	1:0.7.0+dfsg-1 fixed
bullseye	1:0.0+git20210119.5f4716e+dfsg-4 fixed
forky	1:0.57.0-1 fixed
sid	1:0.58.0-1 fixed
trixie	1:0.27.0-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

adsys

focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	Fixed 0.16.4ubuntu1.1 released

containerd

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
xenial	not-affected

golang-golang-x-net

jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected

golang-golang-x-net-dev

bionic	not-affected
focal	not-affected
jammy	dne
noble	dne
questing	dne
resolute	dne
xenial	not-affected

google-guest-agent

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
xenial	not-affected

juju-core

jammy	dne
noble	dne
questing	dne
resolute	dne
xenial	not-affected

lxd

bionic	not-affected
focal	not-affected
jammy	dne
noble	dne
questing	dne
resolute	dne
xenial	not-affected

Azure Linux Releases

Azure Package

Release

azurelinux-image-tools

Azure Linux 3.0

0:1.2.0-2.azl3

fixed

ignition-flatcar

Azure Linux 3.0

0:2.22.0-2.azl3

fixed

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://go.dev/cl/746180

https://go.dev/issue/77652

https://nvd.nist.gov/vuln/detail/CVE-2026-27141

https://pkg.go.dev/vuln/GO-2026-4559