CVE-2026-96609
High
Description
Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fill the ring buffer (1024 lines). It is not exploitable by unauthorized clients.
SeverityHigh
CVSS7.1
Exploit probability—
ProductAlbatross
PublishedSep 23, 2026
First seenSep 23, 2026
Weakness typeCWE-770Allocation of resources without limits
How to fix
Update
- Robur Albatross2.7.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Robur Albatross | 1.0.0 ≤ v < 2.7.2 | 2.7.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.