NewsFortinet PSIRT
HTTP/2 Bomb CVE-2026-49975
Teaser from the source
CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. Revised on 2026-08-19 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTLinked advisories
- CVE-2026-49975Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update
- CVE-2026-49975Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen
- CVE-2026-49975Apache HTTP Server: Speicherzuweisung mit übermäßiger Größe
- CVE-2026-49975Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- CVE-2026-49975Apache HTTP Server: Speicherzuweisung mit übermäßiger Größe
- CVE-2026-49975Security update for apache2
- CVE-2026-49975Apache HTTP Server vulnerability
- CVE-2026-49975nginx vulnerability
- CVE-2026-49975Security update for apache2
- CVE-2026-49975Debian LTS apache2: security update
- CVE-2026-49975nginx vulnerability
- CVE-2026-49975Apache HTTP Server: mod_http2 denial of service
- CVE-2026-49975nginx vulnerability
- CVE-2026-49975HTTP/2-Implementierungen: Schwachstelle ermöglicht Denial of Service
- CVE-2026-49975IBM QRadar SIEM: Mehrere Schwachstellen
- CVE-2026-49975Apache HTTP Server vulnerabilities
- CVE-2026-49975Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update
- CVE-2026-49975Apache HTTP Server: Mehrere Schwachstellen
- CVE-2026-49975Apache HTTP Server: mod_http2 denial of service
- CVE-2026-49975Security update for apache2
- CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.
- CVE-2026-49975Security update for apache2
- CVE-2026-49975HTTP/2 Bomb CVE-2026-49975
- CVE-2026-49975nginx regression
- CVE-2026-49975Debian apache2: security update
- CVE-2026-49975Security update for apache2
Affected vendors and products
More on HTTP
Other advisories
- Not ratedosv:CLEANSTART-2026-TX75545Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents
- Not ratedosv:CLEANSTART-2026-AT94984http
- Not ratedosv:CLEANSTART-2026-FS10341urllib3 is an HTTP client library for Python
- Not ratedosv:CLEANSTART-2026-DE53571urllib3 is an HTTP client library for Python
- Not ratedosv:CLEANSTART-2026-ZN14409urllib3 is an HTTP client library for Python
- Not ratedosv:CLEANSTART-2026-GQ78665urllib3 is an HTTP client library for Python
- Not ratedosv:CLEANSTART-2026-OL29937urllib3 is an HTTP client library for Python
- Not ratedosv:CLEANSTART-2026-HD10581In Symfony http-foundation prior to versions 5
Other news entries
- Apache HTTP Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)NewsSANS ISC Diary
- Apache HTTP Server patches critical HTTP/2 remote code execution flawNewsBleepingComputer
- Apache Patches Critical HTTP Server RCE Found by Anthropic, GoogleNewsSecurityWeek
- Kritische Sicherheitslücke in Apache2 ermöglicht CodeeinschleusungNewsheise Security
- NCSC-2026-0492 [1.00] [M/H] Kwetsbaarheden verholpen in Node.jsNewsNCSC-NL
- Red Hat: Kritische Sicherheitslücke in Apache HTTP Server entdecktNewsGolem.de — Security
- Apache HTTP Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-163
ID