CVE-2026-49160

HighCVSS 7.5

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

48.44%

99th percentile - higher than 99% of all known CVEs

Uncontrolled resource consumption in HTTP/2 allows an unauthenticated attacker to perform a denial-of-service (DoS) attack over the network.

An attacker can overload the server, causing service unavailability for legitimate users.

Apply security patches for the HTTP/2 implementation and implement connection rate limits.

Original NVD description (English source)

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.