HTTP/2

Everything Threat Times has reported about HTTP/2: 2 stories, newest first. Part of our Vulnerabilities coverage.

Apache Tomcat Fixes Critical CVE-2026-101356 HTTP/2 Data Leakage in 11.0.27, 10.1.61, 9.0.123

Threat TimesOct 20, 2026

A critical vulnerability in Apache Tomcat allows data leakage between users via HTTP/2. Administrators must upgrade to specific patched versions immediately.

Vulnerabilities

AWS WAF Vulnerabilities Allow HTTP/2 Multi-Frame Request Bypass

Threat TimesOct 9, 2026

AWS issued a security bulletin for two CVEs in WAF that could let attackers bypass inspection rules via HTTP/2 multi-frame requests.