CVE-2026-9054
Critical
Description
An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.
SeverityCritical
CVSS9.2
Exploit probability—
Product9front
PublishedMay 22, 2026
First seenMay 22, 2026
Weakness typeCWE-130CWE-130
How to fix
Update
- 9front 9front70c97c334171c715df82774d1a47638abaca2db4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 9front 9front | 863431cff8b47fa20625f4cbee3ea4e92367b152 ≤ v < 70c97c334171c715df82774d1a47638abaca2db4 | 70c97c334171c715df82774d1a47638abaca2db4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.