CVE Catalog
CVE-2026-49788
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk0.78%
52th percentile - higher than 52% of all known CVEs
Summary
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.
Risk Assessment
The attack may overload the HTTP/2 server, leading to unavailability of the organization's web services.
Recommendation
Update the HTTP/2 implementation to a version with resource allocation limits.
Other vulnerabilities in HTTP/2
Original NVD description (English source)
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.