Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

🗓️ 09 Oct 2026 18:08:12Reported by KitPloitType

kitploit🔗 kitploit.com👁 18 Views

HTTP/2 Bomb DoS in major web servers combining HPACK bomb and zero-byte flow control window.

Reporter	Title	Published	Views	Family All 240
FreeBSD	Apache httpd -- DoS exploit in HTTP/2	2 Jun 202600:00	–	freebsd
GithubExploit	Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server	21 Aug 202604:18	–	githubexploit
GithubExploit	Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server	5 Jul 202620:50	–	githubexploit
GithubExploit	Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server	18 Jun 202613:17	–	githubexploit
GithubExploit	Exploit for CVE-2026-49975	10 Jun 202612:52	–	githubexploit
GithubExploit	Exploit for CVE-2026-49975	4 Jun 202606:22	–	githubexploit
GithubExploit	Exploit for Improper Handling of Highly Compressed Data (Data Amplification) in Apache Http_Server	16 Sep 202607:21	–	githubexploit
GithubExploit	Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server	10 Jun 202605:06	–	githubexploit
GithubExploit	Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server	13 Jun 202604:05	–	githubexploit
GithubExploit	Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server	13 Jun 202617:05	–	githubexploit

09 Oct 2026 18:08Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.04169

SSVC

HTTP/2 Bomb web servers denial of service HPACK Bomb flow control CVE-2026-49975