open-flaw/CVE-2026-56848

PoC

view exploit source poc_in_githubauthor open-flawpublished 2026-08-19catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-56848US	—	0.52% (44th)	Exploit	2026-08-04
A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap-use-after-free.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.