Nghttp2 — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Denial of Service Vulnerabilities in Node.js 20 Affect Fedora Users

  Multiple denial of service vulnerabilities have been identified in Node.js version 20, affecting Fedora operating systems. The vulnerabilities include CVE-2026-21717, CVE-2026-21714, CVE-2026-21713, and CVE-2026-21716,…

  3 articles · Updated May 5, 2026
• Critical DoS Vulnerability in nghttp2 Affects Multiple Debian Releases

  A critical denial-of-service (DoS) vulnerability, CVE-2026-27135, was identified in nghttp2, affecting Debian distributions. The flaw allows attackers to exploit missing iframe state validations, leading to assertion…

  2 articles · Updated May 14, 2026
• Critical nghttp2 Vulnerability Exposes Backend Services to Smuggling Attacks

  A vulnerability in the nghttp2 nghttpx proxy has been identified, affecting multiple Ubuntu versions. The flaw arises from improper handling of HTTP/1.1 Upgrade requests containing a Content-Length header and body. This…

  2 articles · Updated July 2, 2026
• SUSE Linux Munge Buffer Overflow Vulnerability Update

  SUSE has released updates addressing a critical buffer overflow vulnerability (CVE-2026-25506) in the munge package, affecting multiple SUSE Linux versions. The vulnerability, which was published on February 10, 2026,…

  1361 articles · Updated February 12, 2026

Recent Intelligence Reports

• Ubuntu 26.04 LTS nghttp2 Important Network Access Vulnerability USN-8495 — Linuxsecurity · July 2, 2026
• USN-8495-1: nghttp2 vulnerability — Ubuntu · July 2, 2026
• Ubuntu LTS USN-4820-1 nginx Moderate Security Patch CVE-2026 — Linuxsecurity · May 13, 2026
• Fedora 44 nodejs20 Denial of Service Issues Update 2026-05 — Linuxsecurity · May 5, 2026
• SUSE Linux 15 SP7 nghttp2 Important DoS Fix 2026-1074 — Linuxsecurity · March 26, 2026

Related Entities