{"metadata": {"vulnerability": "CVE-2026-49975", "count": 474, "kinds": {"milestone": 60, "sighting": 66, "kev": 0, "other": 348}}, "data": [{"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T16:59:06.340Z", "date_only": false, "value": "2025-07-10T16:59:06.340000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-07-10T18:00:46.989Z", "date_only": false, "value": "2025-07-10T18:00:46.989628+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-03-13T13:23:00.376Z", "date_only": false, "value": "2026-03-13T13:23:00.376000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-03-13T14:01:14.098Z", "date_only": false, "value": "2026-03-13T14:01:14.098405+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-03-18T17:59:02.045Z", "date_only": false, "value": "2026-03-18T17:59:02.045000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-03-18T17:59:02.045Z", "date_only": false, "value": "2026-03-18T17:59:02.045000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-03-18T19:02:13.823Z", "date_only": false, "value": "2026-03-18T19:02:13.823002+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-03-18T19:02:13.823Z", "date_only": false, "value": "2026-03-18T19:02:13.823002+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-03-25T02:59:10.179Z", "date_only": false, "value": "2026-03-25T02:59:10.179000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-04-07T00:00:00Z", "date_only": false, "value": "2026-04-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-05-04T12:39:42.273Z", "date_only": false, "value": "2026-05-04T12:39:42.273000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-05-04T12:39:42.273Z", "date_only": false, "value": "2026-05-04T12:39:42.273000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-05-04T12:39:42.273Z", "date_only": false, "value": "2026-05-04T12:39:42.273000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-04T12:39:42.273Z", "date_only": false, "value": "2026-05-04T12:39:42.273000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-04T12:39:42.273Z", "date_only": false, "value": "2026-05-04T12:39:42.273000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-04T12:54:54.383Z", "date_only": false, "value": "2026-05-04T12:54:54.383000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-05-04T12:54:54.383Z", "date_only": false, "value": "2026-05-04T12:54:54.383000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-05-04T12:54:54.383Z", "date_only": false, "value": "2026-05-04T12:54:54.383000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-04T12:54:54.383Z", "date_only": false, "value": "2026-05-04T12:54:54.383000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-04T12:54:54.383Z", "date_only": false, "value": "2026-05-04T12:54:54.383000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-04T13:01:08.557Z", "date_only": false, "value": "2026-05-04T13:01:08.557596+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-05-04T13:01:08.557Z", "date_only": false, "value": "2026-05-04T13:01:08.557596+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-05-04T13:01:08.557Z", "date_only": false, "value": "2026-05-04T13:01:08.557596+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-04T13:01:08.557Z", "date_only": false, "value": "2026-05-04T13:01:08.557596+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-04T13:01:08.557Z", "date_only": false, "value": "2026-05-04T13:01:08.557596+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-04T13:07:30.753Z", "date_only": false, "value": "2026-05-04T13:07:30.753000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-05-04T13:07:30.753Z", "date_only": false, "value": "2026-05-04T13:07:30.753000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-05-04T13:07:30.753Z", "date_only": false, "value": "2026-05-04T13:07:30.753000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-04T13:07:30.753Z", "date_only": false, "value": "2026-05-04T13:07:30.753000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-04T13:07:30.753Z", "date_only": false, "value": "2026-05-04T13:07:30.753000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-04T14:01:07Z", "date_only": false, "value": "2026-05-04T14:01:07.000400+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-05-04T14:01:07Z", "date_only": false, "value": "2026-05-04T14:01:07.000400+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-05-04T14:01:07Z", "date_only": false, "value": "2026-05-04T14:01:07.000400+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-04T14:01:07Z", "date_only": false, "value": "2026-05-04T14:01:07.000400+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-04T14:01:07Z", "date_only": false, "value": "2026-05-04T14:01:07.000400+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-04T14:01:10.810Z", "date_only": false, "value": "2026-05-04T14:01:10.810459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-05-04T14:01:10.810Z", "date_only": false, "value": "2026-05-04T14:01:10.810459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-05-04T14:01:10.810Z", "date_only": false, "value": "2026-05-04T14:01:10.810459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-04T14:01:10.810Z", "date_only": false, "value": "2026-05-04T14:01:10.810459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-04T14:01:10.810Z", "date_only": false, "value": "2026-05-04T14:01:10.810459+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-04T14:41:27.520Z", "date_only": false, "value": "2026-05-04T14:41:27.520000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-04T14:41:27.520Z", "date_only": false, "value": "2026-05-04T14:41:27.520000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-05-04T14:41:27.520Z", "date_only": false, "value": "2026-05-04T14:41:27.520000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-04T14:41:27.520Z", "date_only": false, "value": "2026-05-04T14:41:27.520000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-04T14:41:27.520Z", "date_only": false, "value": "2026-05-04T14:41:27.520000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-04T14:48:29.832Z", "date_only": false, "value": "2026-05-04T14:48:29.832000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-04T14:48:29.832Z", "date_only": false, "value": "2026-05-04T14:48:29.832000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-04T15:01:18.611Z", "date_only": false, "value": "2026-05-04T15:01:18.611919+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-04T15:01:18.611Z", "date_only": false, "value": "2026-05-04T15:01:18.611919+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-04T15:01:24.989Z", "date_only": false, "value": "2026-05-04T15:01:24.989510+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-04T15:01:24.989Z", "date_only": false, "value": "2026-05-04T15:01:24.989510+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-05-04T15:01:24.989Z", "date_only": false, "value": "2026-05-04T15:01:24.989510+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-04T15:01:24.989Z", "date_only": false, "value": "2026-05-04T15:01:24.989510+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-04T15:01:24.989Z", "date_only": false, "value": "2026-05-04T15:01:24.989510+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-05T13:10:05.656Z", "date_only": false, "value": "2026-05-05T13:10:05.656000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-05T13:10:05.656Z", "date_only": false, "value": "2026-05-05T13:10:05.656000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-05T14:01:25.519Z", "date_only": false, "value": "2026-05-05T14:01:25.519480+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-05T14:01:25.519Z", "date_only": false, "value": "2026-05-05T14:01:25.519480+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-05T21:29:41.527Z", "date_only": false, "value": "2026-05-05T21:29:41.527000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-05T21:29:41.527Z", "date_only": false, "value": "2026-05-05T21:29:41.527000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-05T21:29:41.527Z", "date_only": false, "value": "2026-05-05T21:29:41.527000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-05T21:29:41.527Z", "date_only": false, "value": "2026-05-05T21:29:41.527000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-05T21:29:41.527Z", "date_only": false, "value": "2026-05-05T21:29:41.527000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-05T22:01:12.666Z", "date_only": false, "value": "2026-05-05T22:01:12.666022+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-05T22:01:12.666Z", "date_only": false, "value": "2026-05-05T22:01:12.666022+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-05T22:01:12.666Z", "date_only": false, "value": "2026-05-05T22:01:12.666022+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-05T22:01:12.666Z", "date_only": false, "value": "2026-05-05T22:01:12.666022+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-05T22:01:12.666Z", "date_only": false, "value": "2026-05-05T22:01:12.666022+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-10T06:36:16.927Z", "date_only": false, "value": "2026-05-10T06:36:16.927000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-05-10T07:00:47.768Z", "date_only": false, "value": "2026-05-10T07:00:47.768180+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-05-26T12:00:00Z", "date_only": false, "value": "2026-05-26T12:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2026-49975", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": true, "value": "2026-05-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.46.published_at"}, {"timestamp": "2026-05-27T12:00:00Z", "date_only": false, "value": "2026-05-27T12:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2026-49975", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": true, "value": "2026-05-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": true, "value": "2026-05-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": true, "value": "2026-05-31", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.25.published_at"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": true, "value": "2026-06-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.78.published_at"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-02T12:00:00Z", "date_only": false, "value": "2026-06-02T12:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2026-49975", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-06-02T17:20:37.983Z", "date_only": false, "value": "2026-06-02T17:20:37.983Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-49975", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-49975", "field": "containers.adp.2.datePublic"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-49975", "record": "UBUNTU-CVE-2026-49975", "field": "published"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-49975", "field": "containers.adp.2.timeline.1.time"}, {"timestamp": "2026-06-03T12:19:44.116Z", "date_only": false, "value": "2026-06-03T12:19:44.116342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hmier.bsky.social/post/3mnf3sod7zs24", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "72b1745c-9606-4c13-b4b6-52b3bbc8f4ae", "content": "HTTP/2 BOMB CVE-2026-49975\n\nan assymmetric Denial of Service originated from the RFC\n\nan attacker can send a compresed request that when uncompressed on the server side consumes 32GB memory.\napache, nginx patch now.\nIIS, others still no patch.\nblog.calif.io/p/codex-disc...", "url": "https://bsky.app/profile/hmier.bsky.social/post/3mnf3sod7zs24"}, {"timestamp": "2026-06-03T21:00:00Z", "date_only": false, "value": "2026-06-03T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1898", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "4f041818-94d1-4ee6-9f20-dc26a42373ca", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1898"}, {"timestamp": "2026-06-03T21:00:04Z", "date_only": false, "value": "2026-06-03T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/87196", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "ccdef18e-9a6e-4c41-8e3f-a30ec2b0189b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-03 20:34:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEste repositorio contiene un Proof of Concept (POC) para CVE-2026-49975, tambi\u00e9n conocida como HTTP/2 Bomb, una vulnerabilidad de denegaci\u00f3n de servicio (DoS) remoto que afecta a la mayor\u00eda de los servidores web principales en su configuraci\u00f3n HTTP/2 predeterminada, incluyendo:\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/87196"}, {"timestamp": "2026-06-03T23:21:37.207Z", "date_only": false, "value": "2026-06-03T23:21:37.207003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buyoh.bsky.social/post/3mngas7khi22e", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "c0048cd3-c2cb-4c1c-87df-ada916c73ae9", "content": "[CVE-2026-49975] \u30ea\u30e2\u30fc\u30c8\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u306e\u8106\u5f31\u6027 HTTP/2 Bomb \u306b\u3064\u3044\u3066\npub.hpc-technologies.co.jp/security/htt...", "url": "https://bsky.app/profile/buyoh.bsky.social/post/3mngas7khi22e"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": true, "value": "2026-06-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.227.published_at"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-04T03:00:06Z", "date_only": false, "value": "2026-06-04T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/OEsY4UTDQZoeO-JoR0_u6XYcRl3R5y_OdKFskD7-0o9iXe8", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "9c3ed914-d65b-45ab-83b1-d6d53134d7cf"}, {"timestamp": "2026-06-04T04:01:19.936Z", "date_only": false, "value": "2026-06-04T04:01:19.936525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/slackers.it/post/3mngqgfdjtb23", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "d3e4bcf0-c9b7-47fc-b9b8-3911d946430a", "content": "6/19\n\nhttps://seclists.org/oss-sec/2026/q2/790\n    https://www.cve.org/CVERecord?id=CVE-2026-49975\n  (* Security fix *)\nn/mosh-1.4.0-x86_64-21.txz:  Rebuilt.\n  Recompiled against abseil-cpp-20260526.0.\nn/net-tools-20181103_0eebece-x86_64-4.txz:  Rebuilt.", "url": "https://bsky.app/profile/slackers.it/post/3mngqgfdjtb23"}, {"timestamp": "2026-06-04T05:36:52.382Z", "date_only": false, "value": "2026-06-04T05:36:52.382839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/skip2networks.bsky.social/post/3mngvr7h6ly25", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "07d1e576-ac3f-4335-85ae-27437ea26db7", "content": "HTTP/2 Bomb is a remote denial-of-service attack affecting major web servers including nginx, Apache, IIS, Envoy, and Pingora. At this time we do not believe our network is vulnerable. Read more: https://www.skip2.net/blog/security/CVE-2026-49975", "url": "https://bsky.app/profile/skip2networks.bsky.social/post/3mngvr7h6ly25"}, {"timestamp": "2026-06-04T06:37:51.425Z", "date_only": false, "value": "2026-06-04T06:37:51.425349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mngz6bl5an2s", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "6c0ec0b7-0535-4acf-aa7b-191fd091991a", "content": "#DDoS: New 'HTTP/2 Bomb' DoS attack crashes major web servers in under a minute. Impacted servers include #NGINX, #Apache HTTP Server, Microsoft #IIS, Envoy, and Cloudflare Pingora. This vulnerability was discovered by Codex AI agent. CVE-2026-49975:\n\ud83d\udc47", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3mngz6bl5an2s"}, {"timestamp": "2026-06-04T07:00:04Z", "date_only": false, "value": "2026-06-04T07:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/87238", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "71b9f311-bfde-483a-949d-e9bdbe507f29", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49975-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mrx-arafat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-04 06:23:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTTP/2 Bomb PoC \u2014 CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/87238"}, {"timestamp": "2026-06-04T07:00:13Z", "date_only": false, "value": "2026-06-04T07:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CZ6mS_FbPsjRM1NAYtRNVHQnuSLpdCQIGgCQzQNM_WxAyUM", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "c7b06180-2e9c-4200-8c79-3ce830e94814"}, {"timestamp": "2026-06-04T09:00:04Z", "date_only": false, "value": "2026-06-04T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kLKPPvOvIF-5j3nlBqFuX9r9eU25HTXmNetuXHYMklt92wg", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "8cd6e034-ed3e-4e40-a605-7980599a67f1"}, {"timestamp": "2026-06-04T13:37:38.776Z", "date_only": false, "value": "2026-06-04T13:37:38.776870Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116692107565448324", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "3901e398-d73a-4ab6-b9ef-8a5496e7ebd5", "content": "Some increased actor activities are shown targeting Apache HTTP Server (CVE-2026-49975) https://vuldb.com/vuln/368279/cti", "url": "https://infosec.exchange/users/vuldb/statuses/116692107565448324"}, {"timestamp": "2026-06-04T13:54:29Z", "date_only": false, "value": "2026-06-04T13:54:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/rlnorthcutt/c3f1d2ac700644acaed93bc181d7703d", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "fb060370-0030-4d18-9ed4-555e58fb6c5f", "url": "https://gist.github.com/rlnorthcutt/c3f1d2ac700644acaed93bc181d7703d"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": true, "value": "2026-06-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.154.published_at"}, {"timestamp": "2026-06-05T02:00:03Z", "date_only": false, "value": "2026-06-05T02:00:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/87358", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "b9b9ee1d-faba-46c9-9ae7-3b980876a658", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a http2-bomb\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a obrige\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-05 01:55:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49975 HTTP/2 Stream Amplification \u2014 Docker PoC with Web Console\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/87358"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-05T06:04:44.009Z", "date_only": false, "value": "2026-06-05T06:04:44.009Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-49975", "field": "containers.adp.2.timeline.0.time"}, {"timestamp": "2026-06-05T06:11:27.209Z", "date_only": false, "value": "2026-06-05T06:11:27.209947Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-49975", "record": "BELL-CVE-2026-49975", "field": "published"}, {"timestamp": "2026-06-05T09:00:04Z", "date_only": false, "value": "2026-06-05T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2GKVzEdq0Q1GgXdde3R68qhjmtmEcsIfO4W2udc5u2OvA5M", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "cda42180-b62d-4d5d-b3a0-89feff7a6260"}, {"timestamp": "2026-06-05T13:08:41Z", "date_only": false, "value": "2026-06-05T13:08:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3220", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "106ce591-aa3d-41d2-996b-297e3419164d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 HTTP/2 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache HTTP Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-07789\nCVE-2026-49975\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Apache HTTP Server:\nhttps://github.com/apache/httpd/commit/47d3100b252dc6668a9e46ae885242be9eeca9cd\n\n\u0414\u043b\u044f nginx:\nhttps://github.com/nginx/nginx/commit/365694160a85229a7cb006738de9260d49ff5fa2\nhttps://github.com/nginx/nginx/pull/1116\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP/2 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 (httpd.conf) \u0438\u043b\u0438 \u0432\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435;\n- \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0438 \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u043e\u043b\u0435\u0439 \u0432 \u043e\u0434\u043d\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u0435.", "url": "https://t.me/bdufstecru/3220"}, {"timestamp": "2026-06-05T18:06:06.240Z", "date_only": false, "value": "2026-06-05T18:06:06.240545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mnkq3rnnml24", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "c58ca69b-9196-4ebd-9296-62de1c3e295d", "content": "\ud83d\udd12 Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy\n\nHAProxy has released guidance on how to protect against the HTTP/2 Bomb vulnerability, identified as CV...\n\nhttps://tinyurl.com/26tcpnxk #CyberSecurity #InfoSec #CrustyTLDR", "url": "https://bsky.app/profile/crustytldr.bsky.social/post/3mnkq3rnnml24"}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": true, "value": "2026-06-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.148.published_at"}, {"timestamp": "2026-06-06T03:03:03.280Z", "date_only": false, "value": "2026-06-06T03:03:03.280868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mnlo3zm6xq2n", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "6a319ac2-fc79-48c5-9232-12bf1b43809f", "content": "The latest update for #HAProxy includes \"Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy\" and \"Announcing HAProxy 3.4\".\n \n#DevOps #Kubernetes #Security https://opsmtrs.com/3aGSzYy", "url": "https://bsky.app/profile/opsmatters.com/post/3mnlo3zm6xq2n"}, {"timestamp": "2026-06-06T10:09:47.303Z", "date_only": false, "value": "2026-06-06T10:09:47.303757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sinologic.net/post/3mnmfx2nmpp26", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "24ae317e-96ff-4746-8c01-5bb6a1eedc18", "content": "HTTP/2 Bomb (CVE-2026-49975): el ataque que tumba un servidor web en segundos desde un PC de casa\n\nNuestro amigo Carlos Ros nos ha despertado esta mana\u00f1a avisado esta ma\u00f1ana por el canal de Telegram de Sinologic \u2026\n\n#apache #Carlos_Ros #CVE #DoS #HTTP2 #NGINX #Seguridad #telegram #vulnerabilidad", "url": "https://bsky.app/profile/sinologic.net/post/3mnmfx2nmpp26"}, {"timestamp": "2026-06-06T10:55:11.714Z", "date_only": false, "value": "2026-06-06T10:55:11.714984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mnmiibejnk2y", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "eb477e95-c331-452d-85fb-30a2fb3386e4", "content": "#\ud83d\udd16\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\nCVE-2026-49975\u300cHTTP/2 Bomb\u300d\u3092\u308f\u304b\u308a\u3084\u3059\u304f\u89e3\u8aac\u2014\u2014AI\u304c\u4eba\u9593\u3088\u308a\u5148\u306b\u6c17\u3065\u3044\u305f\u8106\u5f31\u6027 - Qiita\n\nTL;DR CVE-2026-49975\uff08\u901a\u79f0 HTTP/2 Bomb\uff09\u306f\u3001HTTP/2 \u306e\u4ed5\u69d8\u4e0a\u306e\u7d44\u307f\u5408\u308f\u305b\u3092\u60aa\u7528\u3057\u305f\u30ea\u30e2\u30fc\u30c8 DoS \u8106\u5f31\u6027 OpenAI Codex \u304c nginx\u30fbApache\u30fbIIS\u30fbEnvoy\u30fbCloudflare Pingora \u306e 5 \u3064\u306e\u4e3b\u8981 Web\u30b5\u30fc\u30d0\u30fc\u306b\u5171\u901a\u3059\u308b\u554f\u984c\u3092\u4eba\u9593\u3088\u308a\u5148\u306b\u767a\u898b\u3057\u305f \u5bb6\u5ead\u7528\u306e 100 Mbps \u56de\u7dda 1 \u672c\u3067 32GB \u306e RAM \u3092 20 \u79d2\u4ee5\u5185\u306b\u67af\u6e07\u3055\u305b\u3089\u308c\u308b ...", "url": "https://bsky.app/profile/hatena-bookmark.bsky.social/post/3mnmiibejnk2y"}, {"timestamp": "2026-06-06T23:09:40.328Z", "date_only": false, "value": "2026-06-06T23:09:40.328021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dailyqiitatrends.bsky.social/post/3mnnrjle6ou26", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "95c67e3e-ff5f-40d1-bca8-e7dbc8a6c6f9", "content": "\u4eca\u65e5\u306eQiita\u30c8\u30ec\u30f3\u30c9\n\nCVE-2026-49975\u300cHTTP/2 Bomb\u300d\u3092\u308f\u304b\u308a\u3084\u3059\u304f\u89e3\u8aac\u2014\u2014AI\u304c\u4eba\u9593\u3088\u308a\u5148\u306b\u6c17\u3065\u3044\u305f\u8106\u5f31\u6027\nCVE-2026-49975\uff08HTTP/2 Bomb\uff09\u306f\u3001\u4e3b\u8981Web\u30b5\u30fc\u30d0\u30fc\u306e\u30e1\u30e2\u30ea\u3092\u67af\u6e07\u3055\u305b\u30c0\u30a6\u30f3\u3055\u305b\u308b\u91cd\u5927\u306aDoS\u8106\u5f31\u6027\u3067\u3059\u3002\nAI\u304c\u65e2\u5b58\u6280\u8853\u3092\u7d44\u307f\u5408\u308f\u305b\u3066\u4eba\u9593\u3088\u308a\u5148\u306b\u767a\u898b\u3057\u305f\u4e8b\u4f8b\u3067\u3042\u308a\u3001AI\u306b\u3088\u308b\u8106\u5f31\u6027\u7279\u5b9a\u304c\u52a0\u901f\u3057\u3066\u3044\u308b\u73fe\u72b6\u3092\u6d6e\u304d\u5f6b\u308a\u306b\u3057\u307e\u3057\u305f\u3002\n\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u3084HTTP/2\u306e\u7121\u52b9\u5316\u3001WAF\u3067\u306e\u9632\u5fa1\u3092\u63a8\u5968\u3059\u308b\u3068\u3068\u3082\u306b\u3001AI\u6642\u4ee3\u306e\u30b9\u30d4\u30fc\u30c9\u306b\u5408\u308f\u305b\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3078\u306e\u79fb\u884c\u3092\u4fc3\u3057\u3066\u3044\u307e\u3059\u3002\n", "url": "https://bsky.app/profile/dailyqiitatrends.bsky.social/post/3mnnrjle6ou26"}, {"timestamp": "2026-06-07T09:50:59.623Z", "date_only": false, "value": "2026-06-07T09:50:59.623501Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sinologic.net/post/3mnovedlyvz2a", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "ff7853d6-f82c-41b4-9d99-82da9296d810", "content": "HTTP/2 Bomb (CVE-2026-49975): The Attack That Takes Down a Web Server in Seconds From a Home PC\n\nOur friend Carlos Ros has woken us up warned us via the Sinologic Telegram channel about a vulnerability that has been flying under the radar. It’s called HTTP/2 Bomb, it has been assig\u2026\n\n#CVE", "url": "https://bsky.app/profile/sinologic.net/post/3mnovedlyvz2a"}, {"timestamp": "2026-06-07T18:40:36.770Z", "date_only": false, "value": "2026-06-07T18:40:36.770962Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpsxcv4bc2z", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "65a9582a-0cc0-4046-a617-f63907bbeb21", "content": "\u26a0\ufe0f Aten\u00e7\u00e3o, pessoal que gerencia servidores Apache em #Debian: a vulnerabilidade HTTP/2 Bomb (CVE-2026-49975) n\u00e3o \u00e9 not\u00edcia velha \u2013 ela ainda afeta qualquer vers\u00e3o 2.4.17 a 2.4.67 com HTTP/2 ligado. Saiba mais:->  tinyurl.com/byaamtm7", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpsxcv4bc2z"}, {"timestamp": "2026-06-07T18:40:45.961Z", "date_only": false, "value": "2026-06-07T18:40:45.961461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpsxfpdxk2z", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "539f5ed1-79f2-4428-85d2-196b09d298d0", "content": "\u26a0\ufe0f Aten\u00e7\u00e3o, pessoal que gerencia servidores Apache em #Debian: a vulnerabilidade HTTP/2 Bomb (CVE-2026-49975) n\u00e3o \u00e9 not\u00edcia velha \u2013 ela ainda afeta qualquer vers\u00e3o 2.4.17 a 2.4.67 com HTTP/2 ligado. Saiba mais:->  tinyurl.com/byaamtm7", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnpsxfpdxk2z"}, {"timestamp": "2026-06-07T22:00:00Z", "date_only": false, "value": "2026-06-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": true, "value": "2026-06-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0710", "record": "CERTFR-2026-AVI-0710", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-08T11:33:22Z", "date_only": false, "value": "2026-06-08T11:33:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/http/2-bomb-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-nel-protocollo", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "33adda9f-11c6-4898-a806-da04ab15a311", "content": "Disponibili Proof of Concept (PoC) per lo sfruttamento della vulnerabilit\u00e0 CVE-2026-49975 - denominata \u201cHTTP/2 Bomb\u201d - che riguarda l\u2019implementazione del protocollo HTTP/2 e che potrebbe consentire attacchi di tipo \u201cDenial of Service\u201d.", "url": "https://www.acn.gov.it/portale/w/http/2-bomb-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-nel-protocollo"}, {"timestamp": "2026-06-08T12:00:00Z", "date_only": false, "value": "2026-06-08T12:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2026-49975", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2026-06-08T15:07:59.231Z", "date_only": false, "value": "2026-06-08T15:07:59.231000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-08T15:10:09.141Z", "date_only": false, "value": "2026-06-08T15:10:09.141000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-08T15:11:12.743Z", "date_only": false, "value": "2026-06-08T15:11:12.743000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-06-08T15:12:21.415Z", "date_only": false, "value": "2026-06-08T15:12:21.415000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-08T15:14:49.189Z", "date_only": false, "value": "2026-06-08T15:14:49.189000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-06-08T15:16:14.594Z", "date_only": false, "value": "2026-06-08T15:16:14.594000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-08T15:16:14.594Z", "date_only": false, "value": "2026-06-08T15:16:14.594000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-06-08T15:16:14.594Z", "date_only": false, "value": "2026-06-08T15:16:14.594000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-08T15:16:14.594Z", "date_only": false, "value": "2026-06-08T15:16:14.594000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-08T15:16:14.594Z", "date_only": false, "value": "2026-06-08T15:16:14.594000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-08T15:17:31.939Z", "date_only": false, "value": "2026-06-08T15:17:31.939000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-06-08T15:19:23.570Z", "date_only": false, "value": "2026-06-08T15:19:23.570000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-06-08T15:20:30.900Z", "date_only": false, "value": "2026-06-08T15:20:30.900000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-08T15:22:11.809Z", "date_only": false, "value": "2026-06-08T15:22:11.809000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-06-08T15:23:46.290Z", "date_only": false, "value": "2026-06-08T15:23:46.290000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-06-08T15:24:52.573Z", "date_only": false, "value": "2026-06-08T15:24:52.573000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-08T15:24:52.573Z", "date_only": false, "value": "2026-06-08T15:24:52.573000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-06-08T15:24:52.573Z", "date_only": false, "value": "2026-06-08T15:24:52.573000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-08T15:24:52.573Z", "date_only": false, "value": "2026-06-08T15:24:52.573000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-08T15:26:04.674Z", "date_only": false, "value": "2026-06-08T15:26:04.674Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-49975", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-08T15:26:04.674Z", "date_only": false, "value": "2026-06-08T15:26:04.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-49975", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-08T16:01:30.220Z", "date_only": false, "value": "2026-06-08T16:01:30.220956+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-06-08T16:01:32.651Z", "date_only": false, "value": "2026-06-08T16:01:32.651836+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-08T16:01:37.898Z", "date_only": false, "value": "2026-06-08T16:01:37.898883+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-06-08T16:01:43.891Z", "date_only": false, "value": "2026-06-08T16:01:43.891910+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-06-08T16:01:53.173Z", "date_only": false, "value": "2026-06-08T16:01:53.173507+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-06-08T16:02:01.682Z", "date_only": false, "value": "2026-06-08T16:02:01.682142+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-08T16:02:01.682Z", "date_only": false, "value": "2026-06-08T16:02:01.682142+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-06-08T16:02:01.682Z", "date_only": false, "value": "2026-06-08T16:02:01.682142+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-08T16:02:01.682Z", "date_only": false, "value": "2026-06-08T16:02:01.682142+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-08T16:02:04.647Z", "date_only": false, "value": "2026-06-08T16:02:04.647650+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-06-08T16:02:19.284Z", "date_only": false, "value": "2026-06-08T16:02:19.284204+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-06-08T16:02:27.677Z", "date_only": false, "value": "2026-06-08T16:02:27.677660+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-08T16:02:34.964Z", "date_only": false, "value": "2026-06-08T16:02:34.964516+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-06-08T16:02:43.595Z", "date_only": false, "value": "2026-06-08T16:02:43.595491+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-08T16:16:44Z", "date_only": false, "value": "2026-06-08T16:16:44Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-262V-G5H9-6MC6", "record": "GHSA-262V-G5H9-6MC6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-08T16:16:44.223Z", "date_only": false, "value": "2026-06-08T16:16:44.223", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49975", "record": "FKIE_CVE-2026-49975", "field": "published"}, {"timestamp": "2026-06-08T16:51:15.190Z", "date_only": false, "value": "2026-06-08T16:51:15.190337Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns5csm57q2r", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "e39f83c6-158f-46bb-b9d7-023e7755df33", "content": "CVE-2026-49975 - Apache HTTP Server: mod_http2 denial of service\nCVE ID : CVE-2026-49975\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of servi...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns5csm57q2r"}, {"timestamp": "2026-06-08T18:31:50Z", "date_only": false, "value": "2026-06-08T18:31:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-262V-G5H9-6MC6", "record": "GHSA-262V-G5H9-6MC6", "field": "published"}, {"timestamp": "2026-06-08T21:00:04Z", "date_only": false, "value": "2026-06-08T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ntg-ofD3LMIChp1i2CdfsMqFjxuqWO46POI-bnFaiH8mdGw", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "0d6238bd-de4a-47f4-9a05-87a6c6cdf237"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-08T22:32:35.729Z", "date_only": false, "value": "2026-06-08T22:32:35.729Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-49975", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-08T23:03:00.914Z", "date_only": false, "value": "2026-06-08T23:03:00.914233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnss3hh26k2o", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "81d27fd5-9958-43cf-ba7c-2206d07683bd", "content": "OpenAI Codex\u304c\u300cHTTP/2\u7206\u5f3e\u300d\u3092\u767a\u898b-1\u53f0\u306ePC\u304b\u3089DOS\u653b\u6483\u304c\u53ef\u80fd\u306b(CVE-2026-49975)\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnss3hh26k2o"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0710", "record": "CERTFR-2026-AVI-0710", "field": "last_revision_date"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0710", "record": "CERTFR-2026-AVI-0710", "field": "initial_release_date"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "vendor_advisories.10.published_at"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0710", "record": "CERTFR-2026-AVI-0710", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-23633", "record": "CNVD-2026-23633", "field": "submitTime"}, {"timestamp": "2026-06-09T01:01:30Z", "date_only": false, "value": "2026-06-09T01:01:30.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T01:01:30Z", "date_only": false, "value": "2026-06-09T01:01:30.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-09T11:13:00.901Z", "date_only": false, "value": "2026-06-09T11:13:00.901618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mnu2uq6ygc2l", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "3d0d18eb-6f6e-412c-9d49-4c46580fe343", "content": "SIOS\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d6\u30ed\u30b0\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\n\nApache\u306e\u8106\u5f31\u6027(Moderate: CVE-2026-34355, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186, CVE-2026-49975, Low:\u8907\u6570)\u30682.4.68\u30ea\u30ea\u30fc\u30b9\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #apache \n\nsecurity.sios.jp/vulnerabilit...", "url": "https://bsky.app/profile/omo.bsky.social/post/3mnu2uq6ygc2l"}, {"timestamp": "2026-06-09T12:35:10.298Z", "date_only": false, "value": "2026-06-09T12:35:10.298426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "7457cc97-225a-421f-b200-f3f21267ed3c", "content": "\ud83d\udd17 CVE : CVE-2026-29167, CVE-2026-29170, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-49975", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25"}, {"timestamp": "2026-06-09T15:56:53.905Z", "date_only": false, "value": "2026-06-09T15:56:53.905878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rolle.mementomori.social/post/3mnukmaoxoqu2", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "81a85c67-4222-465f-af43-7e5efe7584d0", "content": "Today, a regression caused dozens of web services to crash with a segfault because of Ubuntu.\n\n\"USN-8398-1 fixed a vulnerability in nginx. The update introduced a regression causing nginx to crash when being used with external modules.\nThis update reverts the fix for CVE-2026-49975 pending [\u2026]", "url": "https://bsky.app/profile/rolle.mementomori.social/post/3mnukmaoxoqu2"}, {"timestamp": "2026-06-09T18:00:00Z", "date_only": false, "value": "2026-06-09T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260610", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "fbac7e31-6357-4b4e-8b5f-d151ddb98b01", "url": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260610"}, {"timestamp": "2026-06-09T19:30:58.846Z", "date_only": false, "value": "2026-06-09T19:30:58.846761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bearstech.com/post/3mnuwpdazwa2v", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "4a6ccf70-36df-42b2-bc0a-ddc7994f208b", "content": "HTTP/2 Bomb  : la CVE-2026-49975 affecte Apache HTTP Server v2.4.17 \u00e0 2.4.67 et est due \u00e0 un probl\u00e8me d'allocation excessive de m\u00e9moire lors du traitement de certaines requ\u00eates HTTP.\n\nMerci \u00e0 nos camarades d'Evolix qui nous en ont parl\u00e9 il y a quelques jours !\n\n\ud83d\udc49 nvd.nist.gov/vuln/de...\n\n", "url": "https://bsky.app/profile/bearstech.com/post/3mnuwpdazwa2v"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "last_revision_date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": true, "value": "2026-06-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-23633", "record": "CNVD-2026-23633", "field": "openTime"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "initial_release_date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:25057", "record": "ALSA-2026:25057", "field": "published"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:25090", "record": "ALSA-2026:25090", "field": "published"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0731", "record": "CERTFR-2026-AVI-0731", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-10T01:42:51Z", "date_only": false, "value": "2026-06-10T01:42:51.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-10T02:30:57.071Z", "date_only": false, "value": "2026-06-10T02:30:57.071822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnvo6boqxs2a", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "770a3617-e325-43d2-9a93-0ccbac639666", "content": "Top 3 CVE for last 7 days:\nCVE-2015-5119: 20 interactions\nCVE-2020-0601: 20 interactions\nCVE-2026-11645: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-11645: 18 interactions\nCVE-2026-45447: 16 interactions\nCVE-2026-49975: 14 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mnvo6boqxs2a"}, {"timestamp": "2026-06-10T08:39:23.697Z", "date_only": false, "value": "2026-06-10T08:39:23.697Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-APACHE-2026-49975", "record": "BIT-APACHE-2026-49975", "field": "published"}, {"timestamp": "2026-06-10T09:00:04Z", "date_only": false, "value": "2026-06-10T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZHpMnVOz2cJfIOonPjLT3_mqz43XsQAtrT-ty2tkYMtXDqE", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "39a80ff4-7ff9-4178-a74b-527ab9daee7d"}, {"timestamp": "2026-06-10T09:40:49Z", "date_only": false, "value": "2026-06-10T09:40:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-10T09:40:49Z", "date_only": false, "value": "2026-06-10T09:40:49+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-10T09:40:49Z", "date_only": false, "value": "2026-06-10T09:40:49+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-10T11:31:57Z", "date_only": false, "value": "2026-06-10T11:31:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-10T11:31:57Z", "date_only": false, "value": "2026-06-10T11:31:57+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-10T11:31:57Z", "date_only": false, "value": "2026-06-10T11:31:57+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-10T15:00:07Z", "date_only": false, "value": "2026-06-10T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UP0bHdwN2udFarZFpAo4dW_5awpjME5BMssCjsrIyWufG1U", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "a34632f2-93b2-411a-b060-bbfa996faec3"}, {"timestamp": "2026-06-10T15:00:16Z", "date_only": false, "value": "2026-06-10T15:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oPE5BmSUTgJkP15sG2l8M-XYZDyCpS23XHJoqohNHUP8J5w", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "1eef388f-27f8-4c5c-b85b-a5486481a942"}, {"timestamp": "2026-06-10T16:54:43Z", "date_only": false, "value": "2026-06-10T16:54:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-10T16:54:43Z", "date_only": false, "value": "2026-06-10T16:54:43+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-10T16:54:43Z", "date_only": false, "value": "2026-06-10T16:54:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-10T21:00:04Z", "date_only": false, "value": "2026-06-10T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vutlEkkKb9qIgYOqF4-LP04R3ngybqm9kGYUg8WL0zG7ih0", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "8ee23742-4b41-4180-99b2-a598fd59cea4"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-10T22:01:34.186Z", "date_only": false, "value": "2026-06-10T22:01:34.186528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/slackers.it/post/3mnxpljzvvr2u", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "48be5ccd-6508-4b30-a775-36df105eb118", "content": "2/2\n\nn/httpd-2.4.68-x86_64-1.txz:  Upgraded.\n  This is a bugfix release (CVE-2026-49975 was already patched here.)\n  For more information, see:\n    https://downloads.apache.org/httpd/CHANGES_2.4.68", "url": "https://bsky.app/profile/slackers.it/post/3mnxpljzvvr2u"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": false, "value": "2026-06-11T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:25225", "record": "ALSA-2026:25225", "field": "published"}, {"timestamp": "2026-06-11T00:01:12.992Z", "date_only": false, "value": "2026-06-11T00:01:12.992766Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:25090", "record": "RLSA-2026:25090", "field": "published"}, {"timestamp": "2026-06-11T08:49:10Z", "date_only": false, "value": "2026-06-11T08:49:10Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:25057", "record": "ALSA-2026:25057", "field": "modified"}, {"timestamp": "2026-06-11T08:49:17Z", "date_only": false, "value": "2026-06-11T08:49:17Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:25090", "record": "ALSA-2026:25090", "field": "modified"}, {"timestamp": "2026-06-11T10:46:26Z", "date_only": false, "value": "2026-06-11T10:46:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-11T10:46:26Z", "date_only": false, "value": "2026-06-11T10:46:26+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-11T10:46:26Z", "date_only": false, "value": "2026-06-11T10:46:26+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-11T20:30:21Z", "date_only": false, "value": "2026-06-11T20:30:21Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:25225", "record": "ALSA-2026:25225", "field": "modified"}, {"timestamp": "2026-06-11T23:04:58.683Z", "date_only": false, "value": "2026-06-11T23:04:58.683518Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mo2dlmzybc2y", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "0ecd1419-dcfa-4b06-a3bd-82751e6a89cf", "content": "The latest update for #HAProxy includes \"How Clover moved beyond blue-green deployments with HAProxy Fusion Control Plane\" and \"Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy\".\n \n#DevOps #Kubernetes #Security https://opsmtrs.com/3aGSzYy", "url": "https://bsky.app/profile/opsmatters.com/post/3mo2dlmzybc2y"}, {"timestamp": "2026-06-12T01:01:35Z", "date_only": false, "value": "2026-06-12T01:01:35.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-12T01:01:35Z", "date_only": false, "value": "2026-06-12T01:01:35.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-12T07:02:42.028Z", "date_only": false, "value": "2026-06-12T07:02:42.028Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-49975", "record": "MSRC_CVE-2026-49975", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-12T11:11:33Z", "date_only": false, "value": "2026-06-12T11:11:33Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2611", "record": "OESA-2026-2611", "field": "published"}, {"timestamp": "2026-06-12T11:11:33Z", "date_only": false, "value": "2026-06-12T11:11:33Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2627", "record": "OESA-2026-2627", "field": "published"}, {"timestamp": "2026-06-12T11:11:34Z", "date_only": false, "value": "2026-06-12T11:11:34Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2638", "record": "OESA-2026-2638", "field": "published"}, {"timestamp": "2026-06-12T11:11:34Z", "date_only": false, "value": "2026-06-12T11:11:34Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2639", "record": "OESA-2026-2639", "field": "published"}, {"timestamp": "2026-06-12T11:11:34Z", "date_only": false, "value": "2026-06-12T11:11:34Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2640", "record": "OESA-2026-2640", "field": "published"}, {"timestamp": "2026-06-13T00:03:17.085Z", "date_only": false, "value": "2026-06-13T00:03:17.085789Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:25057", "record": "RLSA-2026:25057", "field": "published"}, {"timestamp": "2026-06-13T00:05:06.020Z", "date_only": false, "value": "2026-06-13T00:05:06.020189Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:25225", "record": "RLSA-2026:25225", "field": "published"}, {"timestamp": "2026-06-13T09:00:05Z", "date_only": false, "value": "2026-06-13T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Mx8_R5zb-Z9gjGYN6BhHtUu2odHzDXmYt7pgC-ocYKB9dvw", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "bcd7ab20-7f75-4946-8a95-d1e8f89103e1"}, {"timestamp": "2026-06-14T22:00:00Z", "date_only": false, "value": "2026-06-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-06-14T22:00:00Z", "date_only": false, "value": "2026-06-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-06-15T22:00:00Z", "date_only": false, "value": "2026-06-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-06-15T22:00:00Z", "date_only": false, "value": "2026-06-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-06-15T22:00:00Z", "date_only": false, "value": "2026-06-15T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-16T00:00:00Z", "date_only": true, "value": "2026-06-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0776", "record": "CERTFR-2026-AVI-0776", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-16T04:21:23.203Z", "date_only": false, "value": "2026-06-16T04:21:23.203854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3moex5chm2z2c", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "6a9ab895-412a-4d5b-8d07-400f7fba502b", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-49975) Apache HTTP Server Denial of Service via HTTP/2 Memory Exhaustion\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "url": "https://bsky.app/profile/opsmatters.com/post/3moex5chm2z2c"}, {"timestamp": "2026-06-16T08:20:01.271Z", "date_only": false, "value": "2026-06-16T08:20:01.271+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1791", "record": "WID-SEC-W-2026-1791", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-06-17T22:00:00Z", "date_only": false, "value": "2026-06-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0776", "record": "CERTFR-2026-AVI-0776", "field": "last_revision_date"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0776", "record": "CERTFR-2026-AVI-0776", "field": "initial_release_date"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0776", "record": "CERTFR-2026-AVI-0776", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-18T10:27:36.270Z", "date_only": false, "value": "2026-06-18T10:27:36.270403Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49975", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-06-18T10:27:36.270Z", "date_only": false, "value": "2026-06-18T10:27:36.270403Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49975", "record": "FKIE_CVE-2026-49975", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-18T10:29:04.207Z", "date_only": false, "value": "2026-06-18T10:29:04.207Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-49975", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-18T10:40:33.689Z", "date_only": false, "value": "2026-06-18T10:40:33.689626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3moknb5kd572e", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "c4c7e053-2b88-40fa-b384-6b4e2c5d3f08", "content": "Apache HTTP Server's 'HTTP/2 Bomb' flaw (CVE-2026-49975) enables remote DoS attacks. Upgrade to version 2.4.68+ immediately. #Apache #HTTP2 #CVE202649975 #CyberSecurity #DoS #Vulnerability thedailytechfeed.com/critical-htt...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3moknb5kd572e"}, {"timestamp": "2026-06-18T11:21:49Z", "date_only": false, "value": "2026-06-18T11:21:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/523db0554da2f223a1424635be2e087a", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "750a9aed-b655-4695-9262-6200bfa664e7", "content": "# CVE-2026-49975: CVE-2026-49975: Remote Denial of Service via HTTP/2 HPACK Cookie Memory Amplification in Apache HTTP Server\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-06-08\n> **Full Report:** https://cvereports.com/reports/CVE-2026-49975\n\n## Summary\nCVE-2026-49975 describes a high-severity remote Denial of Service (DoS) vulnerability in the Apache HTTP Server's mod_http2 module. Unauthenticated attackers can exploit the HPACK compression and cookie-merging behavior to trigger severe, quadratic memory allocation. This resource exhaustion is maintained by manipulating the HTTP/2 flow-control window, ultimately forcing an Out-of-Memory condition on the server host.\n\n## TL;DR\nA memory amplification bug in Apache's mod_http2 allows remote unauthenticated attackers to exhaust server RAM using small HTTP/2 header streams, causing a Denial of Service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-789\n- **Attack Vector**: Network\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.01313\n- **EPSS Percentile**: 66.94%\n- **Impact**: Remote Denial of Service\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Apache HTTP Server (mod_http2)\n- **Apache HTTP Server (mod_http2)**: 2.4.17 through 2.4.67 (Fixed in: `2.4.68`)\n\n## Mitigation\n\n- Upgrade to Apache HTTP Server 2.4.68 or later\n- Upgrade mod_http2 to standalone version 2.0.41 or higher\n- Disable HTTP/2 support to fall back to HTTP/1.1\n- Implement operating system or container memory boundaries on worker processes\n\n**Remediation Steps:**\n1. Identify affected server configurations by verifying HTTP/2 status and server version via command-line curl tools.\n2. Apply upstream package updates using default system package managers or compile the latest source distribution of httpd.\n3. If immediate patching is not possible, edit httpd.conf or ssl.conf to limit protocols explicitly to http/1.1.\n4. Apply systemd MemoryMax parameters or run Docker containers with enforced memory and swap limits to prevent system-wide lockups.\n5. Verify the remediation by running automated validation scripts against the newly modified hosts.\n\n## References\n\n- [CVE Official Record](https://www.cve.org/CVERecord?id=CVE-2026-49975)\n- [Apache HTTP Server Security Advisories](https://httpd.apache.org/security/vulnerabilities_24.html)\n- [Upstream Bugfix Commit](https://github.com/icing/mod_h2/commit/35c6e405390ed361189a82acd96675401ea5947c)\n- [Calif.IO HTTP/2 Bomb Discovery Blog](https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb)\n- [OSS-Security List Disclosure](http://www.openwall.com/lists/oss-security/2026/06/03/3)\n- [OSS-Security Official Announcement](http://www.openwall.com/lists/oss-security/2026/06/08/16)\n- [Debian Security Announcement](https://lists.debian.org/debian-lts-announce/2026/06/msg00009.html)\n- [mrx-arafat Proof-of-Concept Exploit](https://github.com/mrx-arafat/CVE-2026-49975-POC)\n- [EQSTLab PoC Repository](https://github.com/EQSTLab/CVE-2026-49975)\n- [LSG-PolarBear PoC Exploit](https://github.com/LSG-PolarBear/CVE-2026-49975)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-49975) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/523db0554da2f223a1424635be2e087a"}, {"timestamp": "2026-06-18T13:10:30.528Z", "date_only": false, "value": "2026-06-18T13:10:30.528498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvmwwejr2h", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "4d1683ad-3f85-4500-a8bd-f681e080a9f2", "content": "\ud83d\udd17 CVE : CVE-2026-49975", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvmwwejr2h"}, {"timestamp": "2026-06-18T14:45:35Z", "date_only": false, "value": "2026-06-18T14:45:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-18T14:45:35Z", "date_only": false, "value": "2026-06-18T14:45:35+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-18T14:45:35Z", "date_only": false, "value": "2026-06-18T14:45:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-18T22:00:00Z", "date_only": false, "value": "2026-06-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-06-19T21:30:21.763Z", "date_only": false, "value": "2026-06-19T21:30:21.763461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3moobzzfbs42j", "record": "cve-2026-49975", "field": "creation_timestamp", "uuid": "795eeb2a-9cab-4022-a6ff-ae6262f3bc81", "content": "Apache HTTP Server mod_http2 flaw lets unauthenticated attackers crash servers with tiny HTTP/2 requests via memory amplification.\u2026\n\nhttps://dev.to/cverports/cve-2026-49975-cve-2026-49975-remote-denial-of-service-via-http2-hpack-cookie-memory-1ghd\n\n#appsec #DevSecOps", "url": "https://bsky.app/profile/getpacketai.bsky.social/post/3moobzzfbs42j"}, {"timestamp": "2026-06-22T15:13:13Z", "date_only": false, "value": "2026-06-22T15:13:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-22T15:13:13Z", "date_only": false, "value": "2026-06-22T15:13:13+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-22T15:13:13Z", "date_only": false, "value": "2026-06-22T15:13:13+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-22T15:18:12Z", "date_only": false, "value": "2026-06-22T15:18:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-22T15:18:12Z", "date_only": false, "value": "2026-06-22T15:18:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-06-22T15:18:12Z", "date_only": false, "value": "2026-06-22T15:18:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-22T22:00:00Z", "date_only": false, "value": "2026-06-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-06-22T23:05:54.242Z", "date_only": false, "value": "2026-06-22T23:05:54.242355Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-49975", "record": "BELL-CVE-2026-49975", "field": "modified"}, {"timestamp": "2026-06-24T22:00:00Z", "date_only": false, "value": "2026-06-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-06-25T00:05:54.122Z", "date_only": false, "value": "2026-06-25T00:05:54.122118Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:25090", "record": "RLSA-2026:25090", "field": "modified"}, {"timestamp": "2026-06-27T00:06:15.811Z", "date_only": false, "value": "2026-06-27T00:06:15.811271Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:25057", "record": "RLSA-2026:25057", "field": "modified"}, {"timestamp": "2026-06-27T00:06:22.487Z", "date_only": false, "value": "2026-06-27T00:06:22.487681Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:25225", "record": "RLSA-2026:25225", "field": "modified"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2026-07-01T08:05:04Z", "date_only": false, "value": "2026-07-01T08:05:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-01T08:05:04Z", "date_only": false, "value": "2026-07-01T08:05:04Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-01T08:05:04Z", "date_only": false, "value": "2026-07-01T08:05:04Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-01T08:05:04Z", "date_only": false, "value": "2026-07-01T08:05:04Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-02T22:36:37Z", "date_only": false, "value": "2026-07-02T22:36:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-02T22:36:37Z", "date_only": false, "value": "2026-07-02T22:36:37Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-02T22:36:37Z", "date_only": false, "value": "2026-07-02T22:36:37Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-02T22:36:37Z", "date_only": false, "value": "2026-07-02T22:36:37Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-05T22:00:00Z", "date_only": false, "value": "2026-07-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2026-07-06T20:21:36Z", "date_only": false, "value": "2026-07-06T20:21:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-06T20:21:36Z", "date_only": false, "value": "2026-07-06T20:21:36Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-06T20:21:36Z", "date_only": false, "value": "2026-07-06T20:21:36Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-06T20:21:36Z", "date_only": false, "value": "2026-07-06T20:21:36Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-06T20:21:38Z", "date_only": false, "value": "2026-07-06T20:21:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-06T20:21:38Z", "date_only": false, "value": "2026-07-06T20:21:38Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-06T20:21:38Z", "date_only": false, "value": "2026-07-06T20:21:38Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-06T20:21:38Z", "date_only": false, "value": "2026-07-06T20:21:38Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2026-07-07T21:48:16Z", "date_only": false, "value": "2026-07-07T21:48:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-07T21:48:16Z", "date_only": false, "value": "2026-07-07T21:48:16+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-07T21:48:16Z", "date_only": false, "value": "2026-07-07T21:48:16+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-07T22:00:00Z", "date_only": false, "value": "2026-07-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2026-07-08T17:58:39Z", "date_only": false, "value": "2026-07-08T17:58:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-08T17:58:39Z", "date_only": false, "value": "2026-07-08T17:58:39+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-08T17:58:39Z", "date_only": false, "value": "2026-07-08T17:58:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-08T19:33:00Z", "date_only": false, "value": "2026-07-08T19:33:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-08T19:33:00Z", "date_only": false, "value": "2026-07-08T19:33:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-08T19:33:00Z", "date_only": false, "value": "2026-07-08T19:33:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-08T22:00:00Z", "date_only": false, "value": "2026-07-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2026-07-12T07:00:04.408Z", "date_only": false, "value": "2026-07-12T07:00:04.408215Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/88207", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "01e00114-11a3-4f3d-832a-5bf3bd992427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49975\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a LSG-PolarBear\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 13:12:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49975\u6f0f\u6d1e\u590d\u73b0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88207"}, {"timestamp": "2026-07-12T08:00:07.030Z", "date_only": false, "value": "2026-07-12T08:00:07.030011Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/88197", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "7bad2087-7d63-4e02-a20f-8b4880928221", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49975\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qpzmalqp\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 12:55:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49975\u6f0f\u6d1e\u590d\u73b0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88197"}, {"timestamp": "2026-07-13T13:00:05.801Z", "date_only": false, "value": "2026-07-13T13:00:05.801582Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8365", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "1fcb355c-86fe-42ba-84fd-4faf2a4f6f68", "content": "Citrix \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f NetScaler ADC \u0438 NetScaler Gateway \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c HTTP/2 Bomb \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0443\u044e CitrixBleed.\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, CVE-2026-8451, CVE-2026-8452, CVE-2026-8655 \u0438 CVE-2026-10816, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-10816, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438, \u0430 \u0448\u0435\u0441\u0442\u0430\u044f - \u044d\u0442\u043e\u00a0HTTP/2 Bomb, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0430\u044f DoS \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 Apache HTTP Server.\n\nHTTP/2 Bomb, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-49975 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Codex \u043e\u0442 OpenAI, \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f. Citrix \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0439 \u0434\u043b\u044f NetScaler, - CVE-2026-13474.\n\n\u0412\u0441\u0435 \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 NetScaler ADC \u0438 NetScaler Gateway 14.1-72.61 \u0438 13.1-63.18, \u0432 NetScaler ADC FIPS 14.1-72.61 FIPS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 NetScaler ADC FIPS \u0438 NDcPP 13.1-37.272.\n\nCitrix \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0430\u0436\u0434\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f, \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0438\u0435 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0438 \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432 \u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Citrix \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 CVE-2026-8451 (CVSS 8,8), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u00a0\u0441\u0435\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0CitrixBleed.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 XML-\u043f\u0430\u0440\u0441\u0435\u0440 NetScaler, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043a\u0430\u0436\u0434\u043e\u0433\u043e XML-\u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c NetScaler \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 HTTP-\u043e\u0442\u0432\u0435\u0442\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 NetScaler \u0431\u044b\u043b \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML, \u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0432\u0445\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0443\u0434\u043e\u0432\u043b\u0435\u0442\u0432\u043e\u0440\u044f\u043b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c watchTowr, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NetScaler ADC, NetScaler Gateway \u0438 Citrix Secure Private Access Hybrid \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 NetScaler, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/true_secator/8365"}, {"timestamp": "2026-07-13T22:00:11.645Z", "date_only": false, "value": "2026-07-13T22:00:11.645942Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92095", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "347b0119-9f33-4fa4-b35b-16237f06f495", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a http2-bomb\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Manisso\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 21:33:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept (PoC) for CVE-2026-49975 \u2013 HTTP/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP/2 Slowloris).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92095"}, {"timestamp": "2026-07-13T22:00:18.933Z", "date_only": false, "value": "2026-07-13T22:00:18.933146Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/90531", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "6ebbb432-f1e6-4128-9479-86fd9fb0bccf", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49975\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 10  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 08:34:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTTP/2 Bomb\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/90531"}, {"timestamp": "2026-07-13T22:00:43.758Z", "date_only": false, "value": "2026-07-13T22:00:43.758560Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/88592", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "363c2376-0536-467a-bbf9-5c533fa700eb", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a http2-bomb-detector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a adminlove520\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 04:06:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTTP/2 Bomb (CVE-2026-49975) non-destructive vulnerability detector for Nginx / Apache httpd. Zero-dependency Python.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88592"}, {"timestamp": "2026-07-14T22:00:00Z", "date_only": false, "value": "2026-07-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2026-07-15T00:00:05.426Z", "date_only": false, "value": "2026-07-15T00:00:05.426071Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/88592", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "a57e5ff2-8ab4-4707-babd-2a883552a350", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a http2-bomb-detector\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a adminlove520\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 04:06:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTTP/2 Bomb (CVE-2026-49975) non-destructive vulnerability detector for Nginx / Apache httpd. Zero-dependency Python.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88592"}, {"timestamp": "2026-07-15T00:00:20.871Z", "date_only": false, "value": "2026-07-15T00:00:20.871993Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/90531", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "3d732741-2fb4-4c97-8262-b61ba0b0b0f2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49975\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 10  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 08:34:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTTP/2 Bomb\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/90531"}, {"timestamp": "2026-07-15T00:00:30.208Z", "date_only": false, "value": "2026-07-15T00:00:30.208671Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92095", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "3235b577-4a9f-4976-a6be-46e3d6c5344c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a http2-bomb\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Manisso\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 21:33:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept (PoC) for CVE-2026-49975 \u2013 HTTP/2 server memory exhaustion attack leveraging HPACK amplification and connection retention (HTTP/2 Slowloris).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92095"}, {"timestamp": "2026-07-19T22:00:00Z", "date_only": false, "value": "2026-07-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.16.date"}, {"timestamp": "2026-07-20T22:00:00Z", "date_only": false, "value": "2026-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.17.date"}, {"timestamp": "2026-07-21T22:00:00Z", "date_only": false, "value": "2026-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.revision_history.18.date"}, {"timestamp": "2026-07-21T22:00:00Z", "date_only": false, "value": "2026-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-21T22:00:00Z", "date_only": false, "value": "2026-07-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-21T22:00:00Z", "date_only": false, "value": "2026-07-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-21T22:00:00Z", "date_only": false, "value": "2026-07-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-22T09:17:59.528Z", "date_only": false, "value": "2026-07-22T09:17:59.528+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1824", "record": "WID-SEC-W-2026-1824", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-27T22:00:00Z", "date_only": false, "value": "2026-07-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-03T22:00:00Z", "date_only": false, "value": "2026-08-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-05T00:59:12Z", "date_only": false, "value": "2026-08-05T00:59:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-05T00:59:12Z", "date_only": false, "value": "2026-08-05T00:59:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-05T00:59:12Z", "date_only": false, "value": "2026-08-05T00:59:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-05T01:11:00Z", "date_only": false, "value": "2026-08-05T10:11+09:00", "kind": "other", "label": "Dc:date", "source": "jvndb \u00b7 JVNDB-2026-026849", "record": "JVNDB-2026-026849", "field": "dc:date"}, {"timestamp": "2026-08-05T01:11:00Z", "date_only": false, "value": "2026-08-05T10:11+09:00", "kind": "other", "label": "Dcterms:modified", "source": "jvndb \u00b7 JVNDB-2026-026849", "record": "JVNDB-2026-026849", "field": "dcterms:modified"}, {"timestamp": "2026-08-05T03:12:02Z", "date_only": false, "value": "2026-08-05T03:12:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-05T03:12:02Z", "date_only": false, "value": "2026-08-05T03:12:02+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-05T03:12:02Z", "date_only": false, "value": "2026-08-05T03:12:02+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-06T11:11:33Z", "date_only": false, "value": "2026-08-06T11:11:33Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2611", "record": "OESA-2026-2611", "field": "modified"}, {"timestamp": "2026-08-06T11:11:33Z", "date_only": false, "value": "2026-08-06T11:11:33Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2627", "record": "OESA-2026-2627", "field": "modified"}, {"timestamp": "2026-08-06T11:11:34Z", "date_only": false, "value": "2026-08-06T11:11:34Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2638", "record": "OESA-2026-2638", "field": "modified"}, {"timestamp": "2026-08-06T11:11:34Z", "date_only": false, "value": "2026-08-06T11:11:34Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2639", "record": "OESA-2026-2639", "field": "modified"}, {"timestamp": "2026-08-06T11:11:34Z", "date_only": false, "value": "2026-08-06T11:11:34Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2640", "record": "OESA-2026-2640", "field": "modified"}, {"timestamp": "2026-08-10T22:00:00Z", "date_only": false, "value": "2026-08-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-08-10T22:00:00Z", "date_only": false, "value": "2026-08-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-11T08:56:43.912Z", "date_only": false, "value": "2026-08-11T08:56:43.912+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2455", "record": "WID-SEC-W-2026-2455", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-12T00:00:00Z", "date_only": true, "value": "2026-08-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "last_revision_date"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "initial_release_date"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1015", "record": "CERTFR-2026-AVI-1015", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-13T10:21:42.778Z", "date_only": false, "value": "2026-08-13T10:21:42.778014Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2013", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "5d514eef-8029-4483-9e06-d48d03c178c2", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2013"}, {"timestamp": "2026-08-13T12:45:21.262Z", "date_only": false, "value": "2026-08-13T12:45:21.262717Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msxodu4ta422", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "a79c6bd3-3a6d-47ca-bbcc-f32752f309b2", "content": "Fortinet patched eight flaws across FortiWeb, FortiManager, FortiClient, FortiOS, and FortiSIEM, including auth issues in FortiWeb and FortiManager. Guidance also issued on Apache HTTP Server CVE-2026-49975. #FortiWeb #FortiManager #ApacheHTTPServer", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msxodu4ta422"}, {"timestamp": "2026-08-13T14:00:24.937Z", "date_only": false, "value": "2026-08-13T14:00:24.937077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "49c048f8-2b36-4c28-9f19-1a578815a45b", "content": "\ud83d\udd17 CVE : CVE-2026-26035, CVE-2026-49975, CVE-2026-70465, CVE-2026-70466, CVE-2026-70467, CVE-2026-70468, CVE-2026-71407, CVE-2026-71408", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l"}, {"timestamp": "2026-08-18T02:47:33Z", "date_only": false, "value": "2026-08-18T02:47:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-18T02:47:33Z", "date_only": false, "value": "2026-08-18T02:47:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-18T02:47:33Z", "date_only": false, "value": "2026-08-18T02:47:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-18T14:55:25Z", "date_only": false, "value": "2026-08-18T14:55:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-18T14:55:25Z", "date_only": false, "value": "2026-08-18T14:55:25+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-18T14:55:25Z", "date_only": false, "value": "2026-08-18T14:55:25+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-19T12:05:08.039Z", "date_only": false, "value": "2026-08-19T12:05:08.039Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-49975", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-19T12:05:08.039Z", "date_only": false, "value": "2026-08-19T12:05:08.039Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-49975", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-19T12:18:28.650Z", "date_only": false, "value": "2026-08-19T12:18:28.650", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-49975", "record": "FKIE_CVE-2026-49975", "field": "lastModified"}, {"timestamp": "2026-08-19T12:32:16Z", "date_only": false, "value": "2026-08-19T12:32:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-262V-G5H9-6MC6", "record": "GHSA-262V-G5H9-6MC6", "field": "modified"}, {"timestamp": "2026-08-20T19:50:44Z", "date_only": false, "value": "2026-08-20T19:50:44Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-49975", "record": "UBUNTU-CVE-2026-49975", "field": "modified"}, {"timestamp": "2026-08-29T18:00:05.492Z", "date_only": false, "value": "2026-08-29T18:00:05.492156Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/angie_software/166", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "7c47336e-9dd1-4c1b-ae3d-5622ce7eb6e2", "content": "\u0414\u0440\u0443\u0437\u044c\u044f, \u0432\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!\n\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-49975, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 nginx, Envoy, Apache httpd, Microsoft IIS \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Angie\u00a0/ Angie PRO.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u0445\u043e\u0434\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0441\u0436\u0430\u0442\u044b\u0445 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP/2.\n\n\u0412 Angie \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438: \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0430 max_headers,\n\u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u043d\u0435 \u0431\u043e\u043b\u0435\u0435 1000 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432. \u0414\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0430 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0438\u0437 freenginx \u0435\u0449\u0435 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 1.8.0, \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u0439 \u0435\u0449\u0435 \u0432 2024 \u0433\u043e\u0434\u0443.", "url": "https://t.me/angie_software/166"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-APACHE-2026-49975", "record": "BIT-APACHE-2026-49975", "field": "modified"}, {"timestamp": "2026-09-16T12:00:04.853Z", "date_only": false, "value": "2026-09-16T12:00:04.853183Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102452", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "b479d91e-48d4-45b1-9fa5-ee39a9a66c4b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-49975\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a naheeju\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 07:40:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102452"}, {"timestamp": "2026-09-16T19:13:56Z", "date_only": false, "value": "2026-09-16T19:13:56Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:35:02Z", "date_only": false, "value": "2026-09-16T19:35:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:35:21Z", "date_only": false, "value": "2026-09-16T19:35:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T20:02:50Z", "date_only": false, "value": "2026-09-16T20:02:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:37:28Z", "date_only": false, "value": "2026-09-16T20:37:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:37:48Z", "date_only": false, "value": "2026-09-16T20:37:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:40:58Z", "date_only": false, "value": "2026-09-16T20:40:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:42:51Z", "date_only": false, "value": "2026-09-16T21:42:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T01:00:04.155Z", "date_only": false, "value": "2026-09-17T01:00:04.155222Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102452", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "49f2176a-d228-41e1-9568-63e951b61776", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-49975\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a naheeju\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 07:40:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity research PoC for CVE-2026-49975: HTTP/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102452"}, {"timestamp": "2026-09-17T16:00:27Z", "date_only": false, "value": "2026-09-17T16:00:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:27:15Z", "date_only": false, "value": "2026-09-17T16:27:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:27:41Z", "date_only": false, "value": "2026-09-17T16:27:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:37:47Z", "date_only": false, "value": "2026-09-17T17:37:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-18T04:00:09.841Z", "date_only": false, "value": "2026-09-18T04:00:09.841277Z", "kind": "sighting", "label": "Seen", "source": "Telegram/29Fa6kOu2Kkjlzr-wySBlSXFcHEZP-1nUpNSNRyD8H-deyE", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "b21f4d03-fb21-40eb-8af2-baeea5855d31"}, {"timestamp": "2026-09-19T00:00:23.901Z", "date_only": false, "value": "2026-09-19T00:00:23.901035Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/29Fa6kOu2Kkjlzr-wySBlSXFcHEZP-1nUpNSNRyD8H-deyE", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "e115db1b-30cd-49ff-bc21-b5b952d661ee"}, {"timestamp": "2026-09-23T17:27:14Z", "date_only": false, "value": "2026-09-23T17:27:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-23T17:27:14Z", "date_only": false, "value": "2026-09-23T17:27:14Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22564-1", "record": "SUSE-SU-2026:22564-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-23T17:27:34Z", "date_only": false, "value": "2026-09-23T17:27:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-23T17:27:34Z", "date_only": false, "value": "2026-09-23T17:27:34Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2717-1", "record": "SUSE-SU-2026:2717-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-23T17:27:35Z", "date_only": false, "value": "2026-09-23T17:27:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-23T17:27:35Z", "date_only": false, "value": "2026-09-23T17:27:35Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2735-1", "record": "SUSE-SU-2026:2735-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-23T17:29:13Z", "date_only": false, "value": "2026-09-23T17:29:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-23T17:29:13Z", "date_only": false, "value": "2026-09-23T17:29:13Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21235-1", "record": "OPENSUSE-SU-2026:21235-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": true, "value": "2026-09-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": true, "value": "2026-09-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": true, "value": "2026-09-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "last_revision_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "initial_release_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1256", "record": "CERTFR-2026-AVI-1256", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-05T23:00:20Z", "date_only": false, "value": "2026-10-05T23:00:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/GqO5gWMYnpFUJjSGBTn5o-cvjm6YH7KE3vXFccrE0Va-9G0", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "0cb08699-f3e4-49fb-bcb8-e6a6d2033d7b"}, {"timestamp": "2026-10-05T23:00:20Z", "date_only": false, "value": "2026-10-05T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GqO5gWMYnpFUJjSGBTn5o-cvjm6YH7KE3vXFccrE0Va-9G0", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "ed200f40-6e82-47e3-b2d9-20047d6835fa"}, {"timestamp": "2026-10-07T15:19:15Z", "date_only": false, "value": "2026-10-07T15:19:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-13T10:19:23Z", "date_only": false, "value": "2026-10-13T10:19:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f8adec39-0b02-47ba-9542-6b9dafe336bd", "record": "CVE-2026-49975", "field": "creation_timestamp", "uuid": "29e122f7-509c-4d16-a6be-4ba68d100757"}, {"timestamp": "2026-10-14T12:48:15Z", "date_only": false, "value": "2026-10-14T12:48:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:15Z", "date_only": false, "value": "2026-10-14T12:48:15+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:15Z", "date_only": false, "value": "2026-10-14T12:48:15+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:25057", "record": "RHSA-2026:25057", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T12:48:16Z", "date_only": false, "value": "2026-10-14T12:48:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:16Z", "date_only": false, "value": "2026-10-14T12:48:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:16Z", "date_only": false, "value": "2026-10-14T12:48:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:16Z", "date_only": false, "value": "2026-10-14T12:48:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:16Z", "date_only": false, "value": "2026-10-14T12:48:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:25225", "record": "RHSA-2026:25225", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T12:48:16Z", "date_only": false, "value": "2026-10-14T12:48:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:27114", "record": "RHSA-2026:27114", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T12:48:17Z", "date_only": false, "value": "2026-10-14T12:48:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:17Z", "date_only": false, "value": "2026-10-14T12:48:17+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:17Z", "date_only": false, "value": "2026-10-14T12:48:17+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:36373", "record": "RHSA-2026:36373", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:25090", "record": "RHSA-2026:25090", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:36831", "record": "RHSA-2026:36831", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T12:48:19Z", "date_only": false, "value": "2026-10-14T12:48:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:36846", "record": "RHSA-2026:36846", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T17:35:24Z", "date_only": false, "value": "2026-10-14T17:35:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T17:35:24Z", "date_only": false, "value": "2026-10-14T17:35:24+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T17:35:24Z", "date_only": false, "value": "2026-10-14T17:35:24+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:25042", "record": "RHSA-2026:25042", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T17:35:29Z", "date_only": false, "value": "2026-10-14T17:35:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T17:35:29Z", "date_only": false, "value": "2026-10-14T17:35:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T17:35:29Z", "date_only": false, "value": "2026-10-14T17:35:29+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T17:35:29Z", "date_only": false, "value": "2026-10-14T17:35:29+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T17:35:29Z", "date_only": false, "value": "2026-10-14T17:35:29+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:50572", "record": "RHSA-2026:50572", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T17:35:29Z", "date_only": false, "value": "2026-10-14T17:35:29+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:50538", "record": "RHSA-2026:50538", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T17:35:30Z", "date_only": false, "value": "2026-10-14T17:35:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T17:35:30Z", "date_only": false, "value": "2026-10-14T17:35:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T17:35:30Z", "date_only": false, "value": "2026-10-14T17:35:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:55930", "record": "RHSA-2026:55930", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T17:35:31Z", "date_only": false, "value": "2026-10-14T17:35:31+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T17:35:31Z", "date_only": false, "value": "2026-10-14T17:35:31+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T17:35:31Z", "date_only": false, "value": "2026-10-14T17:35:31+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:55992", "record": "RHSA-2026:55992", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T19:17:43Z", "date_only": false, "value": "2026-10-15T19:17:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-15T19:17:43Z", "date_only": false, "value": "2026-10-15T19:17:43+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T19:17:43Z", "date_only": false, "value": "2026-10-15T19:17:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:27200", "record": "RHSA-2026:27200", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-26T07:03:57Z", "date_only": false, "value": "2026-10-26T07:03:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T07:03:57Z", "date_only": false, "value": "2026-10-26T07:03:57+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T07:03:57Z", "date_only": false, "value": "2026-10-26T07:03:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:27201", "record": "RHSA-2026:27201", "field": "document.tracking.current_release_date"}]}