3 matches found
CVE-2026-49975-POC
CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...
7.5CVSS7.8AI score0.3295EPSS
SaveExploits10
Cloudflare Pingora resource management error vulnerability
Cloudflare Pingora versions prior to 0.8.1 have a resource management vulnerability. This vulnerability arises from HTTP/2 servers not explicitly limiting the size of the decoded header list and the number of concurrent streams. Remote unauthenticated attackers can exploit this vulnerability by...
7.5CVSS5.8AI score0.00429EPSS
SaveExploits0References1
20