What is RHSA-2026:8868?

RHSA-2026:8868 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: nghttp2 security update

Which CVE IDs does RHSA-2026:8868 cover?

RHSA-2026:8868 covers the following CVE IDs: CVE-2026-27135. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

RHSA-2026:8868 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHSA-2026:8868HighCVSS 7.5

Vendor

Published

April 20, 2026

Last Modified

May 28, 2026

CVE-2026-27135 — nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination