HTTP/2 Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
https://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.html
Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora.
The vulnerability has been codenamed HTTP/2 Bomb by Calif.
https://stacker.news/items/1501697
ch0k1 / ch0k1 🇧🇬☦️
npub1k3…q9t9m
2026-06-03 16:08:48 UTC
Author Public Key
npub1k3qrkfq45qsvyp53hvvv2xk6tt9kfdca9asfvm9nc796dq65948q9q9t9mSeen on
wss://nos.lolPublished at
2026-06-03 16:08:48 UTCEvent JSON
{
"id": "94ddae9f766bbfdb4b5ad97ced49806049e89c39b4900e37656d0067bd10c953",
"pubkey": "b4403b2415a020c20691bb18c51ada5acb64b71d2f60966cb3c78ba683542d4e",
"created_at": 1780502928,
"kind": 1,
"tags": [
[
"client",
"stacker.news"
]
],
"content": "HTTP/2 Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy \u0026 Cloudflare\nhttps://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.html\n\nCybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora.\n\nThe vulnerability has been codenamed HTTP/2 Bomb by Calif.\n\nhttps://stacker.news/items/1501697",
"sig": "53037fd5bfd77de8208a1ec14dbec6022f6afb361078c27dc290f9956f2051727a77f0cd312a66e4ff7b1c7be2bd4021f72e78144fa7b77915a24cf7d575bee1"
}