CVE-2026-56386 | Apache bRPC up to 1.17.x HTTP/2 Server DATA Frame Parser integer underflow

October 21, 2026 Yanac

A vulnerability labeled as critical has been found in Apache bRPC up to 1.17.x. This affects an unknown part of the component HTTP2 Server DATA Frame Parser. Executing a manipulation can lead to integer underflow.

This vulnerability is handled as CVE-2026-56386. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More