HTTP/2 Protocol Denial of Service Vulnerability

A vulnerability was identified in HTTP/2 Protocol. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.

Note:

Proof of Concept exploit code is publicly available for CVE-2026-49975. The vulnerability allows remote attacker to cause denial of service against most major web servers. The vulnerable behavior exists in each server's default HTTP/2 configuration. Hence, the risk level is rated as High Risk.