一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月24日

CVE-2026-96609 – Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, lead

未分类
📑 文章目录

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fill the ring buffer (1024 lines). It is not exploitable by unauthorized clients.