QPACK flaws let one HTTP/3 connection exhaust server memory
Seven of ten tested stacks were vulnerable; quic-go, quiche, lsquic and Wireshark had fixes as of October 20, 2026.
68
- Mentions · 7d1
- Mentions · 30d3
- All mentions3
- First seenSep 30, 2026
- Last mentioned3d ago
Timeline
3 articles · newest firstHackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches
Attackers breached two major South Korean churches with ERP web shells and IDOR flaws, exposing hundreds of thousands of records.
76
Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers
Attacker uploaded ASPX webshells to a shared parks-and-rec platform, hitting three servers and hunting cardholder data.
58
Related CVEs
by mentions- CVE-2026-12523<1%7.5Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames
- CVE-2025-13945<1%5.5HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- CVE-2025-64702<1%5.3quic-go is an implementation of the QUIC protocol in Go
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.