Question 1

What is CVE-2026-56853 — CVE-2026-56853?

Accepted Answer

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.

Question 2

What is the authoritative source for CVE-2026-56853?

Accepted Answer

CVE-2026-56853 (CVE-2026-56853) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-56853CVE-2026-56853

Description

Scoring