Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers.

Security Fix(es):

* httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This vulnerability (CVE-2026-49975) involves a memory allocation with an excessive size value in the Apache HTTP Server's mod_http2 module, which can be exploited by sending specially crafted HTTP/2 requests. The flaw leads to denial of service by causing the server to allocate excessive memory, resulting in service disruption. The affected versions are Apache HTTP Server from 2.4.17 through 2.4.67. Red Hat's advisory for JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 4 includes a fix for this issue, along with other related vulnerabilities. The patch addresses the excessive memory allocation and prevents the denial of service condition. No known exploits in the wild have been reported at this time.

Detailed information about Red Hat Security Advisory: httpd:2.4 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical det

CWE-789 Memory Allocation with Excessive Size Value in Apache Software Foundation Apache HTTP Server (CVE-2026-49975) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/security/updates/classification/#important

Canonical URL

Red Hat Security Advisory: mod_http2 security update

apache2

nginx

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.

This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.

CVE-2026-49975 is a memory allocation vulnerability in Apache HTTP Server's mod_http module related to the handling of certain cookie headers in the HTTP/2 implementation. When processing maliciously crafted HTTP requests, the server may allocate excessive memory, leading to resource exhaustion and denial of service. The vulnerability affects Apache HTTP Server versions from 2.4.17 through 2.4.67. Ubuntu security advisories (USN-8384-1) confirm the issue and provide fixed package versions for multiple Ubuntu releases. The vulnerability does not impact confidentiality or integrity but can disrupt service availability.

Detailed information about UBUNTU-CVE-2026-49975 affecting null apache2. Get real-time updates, technical details, and mitigation strategies.

UBUNTU-CVE-2026-49975 - Live Threat Intelligence - Threat Radar | OffSeq.com

Apache HTTP Server: mod_http2 denial of service (CVE-2026-49975)


Red Hat Security Advisory: mod_http2 security updateCVE-2026-49975 0 The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): * httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. HighVulnerability#gcve #csaf #cve-2026-49975 Join the discussion	GCVE Database	06/10/2026, 11:31:57 UTC Added: 06/14/2026, 21:17:05 UTC
Apache HTTP Server: mod_http2 denial of service (CVE-2026-49975)CVE-2026-49975 0 Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. HighVulnerability#gcve #osv #ubuntu-cve-2026-49975 Join the discussion	GCVE Database	06/10/2026, 08:39:23 UTC Added: 07/16/2026, 10:35:43 UTC

Threats Tagged 'ghsa-262v-g5h9-6mc6'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ghsa-262v-g5h9-6mc6'

Lead Pen Test Professional