CVE-2026-49975

CVE-2026-49975 affects Apache HTTP Server’s HTTP/2 (mod_http2) by incorrect cookie header accounting, causing denial of service through excessive memory/CPU usage. Affected sequences span Apache 2.4.17–2.4.67. Debian/Ubuntu advisories and NVD describe the root cause as flawed cookie handling in H...