HTTP/2 Rapid Reset DoS
Vulnerability details
CVECVE-2023-44487
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2026-05-10
VendorMultiple
Affected softwareMultiple web servers
ExposureMedium
Affected devices4
Exploit statusActiveExploit
Recommendation & plan
Apply vendor mitigations for HTTP/2 rapid reset.
Due2026-09-17
Affected devices 4
| Device | Risk | Installed | Fixed | Status |
|---|---|---|---|---|
| corp-dc01 | Medium | older | patched | Open |
| corp-srv-app02 | High | older | patched | Open |
| corp-srv-file01 | Medium | older | patched | Open |
| corp-wks-1187 | High | older | patched | Open |
Remediation workflow
CVE โ Affected Software โ Affected Devices โ Risk โ Exploitability โ Security Recommendation โ Remediation Plan โ Approval โ Remediation โ Verification
Remediation requests require approval. After remediation, verification checks: vulnerability resolved, device healthy, exposure reduced.
