CVE-2026-3206

N/A Unknown

Published: February 25, 2026 Modified: February 27, 2026

Description

Improper Resource Shutdown or Release vulnerability in KrakenD, SLU KrakenD-CE (CircuitBreaker modules), KrakenD, SLU KrakenD-EE (CircuitBreaker modules). This issue affects KrakenD-CE: before 2.13.1; KrakenD-EE: before 2.12.5.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://www.krakend.io/blog/krakend-2.13.1-release-notes/

Source: e5bd9809-e237-4575-952b-81f8a96826ee

https://www.krakend.io/blog/krakend-ee-2.12.5-release-notes/

Source: e5bd9809-e237-4575-952b-81f8a96826ee

2 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.0%

14th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-404

Related CVEs