CVE-2026-47774Suited to automated attack · CISA
Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification
CVSS score
7.5
EPSS probability
%1.1
Risk score
0.1
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
NVD reference
https://bugzilla.redhat.com/show_bug.cgi?id=2487465
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2012-4681 Actively exploited
Vulnerability in N/a
N
Workaround Public Exploits:3EPSS %99
9.8
CVE-2012-1723 Actively exploited
Vulnerability in N/a
N
Workaround Public Exploits:2EPSS %94
9.0
CVE-2021-40438 Actively exploited
mod_proxy SSRF
AS
Patch verified Public Exploits:11EPSS %100
9.8
CVE-2017-12149 Actively exploited
Deserialization of untrusted data in Red Hat, Inc. Jbossas
RH
Workaround Public Exploits:1EPSS %91
9.8
CVE-2016-8735 Actively exploited
Vulnerability in Apache Tomcat
A
Partial patch Public Exploits:1EPSS %90
8.8
CVE-2026-42271 Actively exploited
Command injection in Litellm
L
Patch verified Public Exploits:3EPSS %93
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-47774"