Published on: 04 June 2026
A denial-of-service (DoS) vulnerability (CVE-2026-49975) was found in HTTP/2 protocol. An attacker could exploit the vulnerability by sending specially crafted requests to an affected system.
Reports indicated that proof-of-concept (PoC) exploit code for a denial-of-service vulnerability (CVE-2026-49975, known as HTTP/2 Bomb) in HTTP/2 protocol is publicly available and it is at high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems or follow the recommendations provided by the product vendors to mitigate the elevated risk of cyber attacks.
Successful exploitation of the vulnerability could lead to denial of service on an affected system.
System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.