Search: “http2”

5 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 5 Industry 3 Exploit / PoC 3 Phishing & fraud 1 Ransomware 1 Research 1 Tools 1 Malware 1

SeverityAll critical 3 high 2 medium 6 low 5 info 0

CVE-2026-16028: Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

CVE-2026-16028: Protocol::HTTP2 Perl library before 1.14 lets closed streams linger in the connection table, enabling remote memory exhaustion.

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion because closed streams are never removed from the connection stream table by stream_state. The flaw was disclosed on oss-security by Robert Rothenberg on September 7, 2026. Users should upgrade to Protocol-HTTP2 1.14 or later on CPAN.

oss-securitySep 7, 18:45 UTC · 8d agoVulnerability CVE-2026-16028

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

The Hacker NewsJun 10, 14:36 UTC · Jun 10, 2026Vulnerability CVE-2016-6581 CVE-2025-53020 CVE-2016-8740+3 CVEs

Google Project Zero expert found 3 flaws in Apache Web Server

Security AffairsAug 25, 08:09 UTC · Aug 25, 2020Vulnerability CVE-2020-9490 CVE-2020-11984 CVE-2020-11993

Wireshark 4.4.2: Security updates, bug fixes, updated protocol support

Help Net SecurityJan 9, 08:56 UTC · Jan 9, 2025Vulnerability

Nginx server flaws expose more than a million of servers to DoS attacks

Security AffairsNov 10, 08:56 UTC · Nov 10, 2018Vulnerability CVE-2018-16843 CVE-2018-16844 CVE-2018-16845