FORTINETVERIFIED
HTTP/2 Bomb CVE-2026-49975
Checked 6 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
SECURITY ADVISORYFORTINETVERIFIED
PUBLISHER UPDATE · CVE-2026-49975
CVE-2026-49975 release notes and known issues
HTTP/2 Bomb CVE-2026-49975
Scope: Fortinet products. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. Revised on 2026-08-19 00:00:00
Improvements and security content
- CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. Revised on 2026-08-19 00:00:00
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Fortinet products
Affected versions
- 5.8
- 2.4.17
- 2.4.67
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Review the official publisher document before deployment.