Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 9m ago

#http2 — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#http2

5 stories this week · 8 this month · 11 in 6 months · mostly security

stories per day · 30 days

Related#apache 5 #tomcat 4 #denial-of-service 2 #ubuntu 2 #ajp 1 #apache-http-server 1 #authorization-bypass 1 #canonical 1 #curl 1 #cve 1 #cve-2026-16028 1 #cve-2026-41293 1 #cve-2026-77762 1 #cve-2026-78437 1 #cve-2026-86350 1 #defenses 1 #dos 1 #hpack 1

9 stories, newest first · one card per story

Ubuntu Security Notices·2d ago

USN-8820-1: curl vulnerabilities

#curl #ubuntu #canonical

CVE-2026-13608

Cyber Security News·3d ago high

Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security

#apache #tomcat #websocket

3 min

oss-security·3d ago

CVE-2026-86350: Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

#apache #tomcat #http2

CVE-2026-86350

Ubuntu Security Notices·16d ago

USN-8571-2: Apache HTTP Server regression

#apache #apache-http-server #denial-of-service

CVE-2026-33007

1

oss-security·19d ago

CVE-2026-16028: Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

#cve-2026-16028 #dos #http2

CVE-2026-16028

arXiv cs.CR·22d ago

Understanding the Privacy-Preserving Potential of HTTP/2 Against Webpage Fingerprinting

#defenses #http2 #privacy

Research

ZDI Published Advisories·Aug 24, 2026 high

ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

#cve-2026-19773 #http2 #libwebsockets

CVE-2026-19773

Fortinet PSIRT·Aug 12, 2026

HTTP/2 Bomb CVE-2026-49975

#apache #apache-http-server #denial-of-service

CVE-2026-49975

CyberScoop·Aug 12, 2026

Kimwolf botnet rebuilt to survive takedowns, researchers say

#aisuru #android #botnet

in the wild 4 min1