PoC Exploit Released for HTTP/2 Bomb Remote DoS Vulnerability in Apache HTTP Server

A proof-of-concept (PoC) exploit has been publicly released for a critical Denial of Service vulnerability in Apache HTTP Server, tracked as CVE-2026-49975, dubbed the “HTTP/2 Bomb.” The flaw allows remote attackers to exhaust server memory and disrupt services without authentication, posing a significant risk to organizations running unpatched Apache deployments. The vulnerability lies in the […] The post PoC Exploit Released for HTTP/2 Bomb Remote DoS Vulnerability in Apache HTTP Server appeared first on Cyber Security News.