sign in--:--:--UTC

CVE-2026-49975

exploited in the wild

CVSS

—

Reports

6

First seen

Jun 3

Last seen

Jun 18

Affected product

HTTP/2 implementations

Associated actors

Ghostwriter ×1 Oldphantomoftheopera ×1 Oleksii Oleksiyovych Lytvynenko ×1 UAT-8616 ×1

Recent reports

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

The Hacker NewsJun 18 Critical

Multiple Vulnerabilities in Ivanti Products – RCE Exploited in Wild

GovCERT.HKJun 10 Medium

Apache HTTP Server Multiple Vulnerabilities

HKCERTJun 10 High

HTTP/2 Protocol DoS Vulnerability (CVE-2026-49975) – PoC Public

GovCERT.HKJun 4 High

HTTP/2 Protocol Denial of Service Vulnerability

HKCERTJun 4 High

HTTP/2 Bomb DoS attack crashes web servers in under a minute

Bleeping ComputerJun 3

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans