https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 11:20:09 +0000 https://cve.radiocsirt.org/vuln/cve-2026-13763 <p><strong>Affected:</strong> AWS Application Load Balancer</p> <p>Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This issue only impacts HTTP/2 ALB target groups.</p> <p>To remediate this issue, customers should enable the &#34;Inspect after sufficient data&#34; target group configuration associated to an ALB load balancer. Refer to: ( https://docs.aws.amazon.com/elasticloadbalancing/latest/application/edit-target-group-attributes.html#waf-http2-inspection )</p> <p><strong>Affected:</strong> AWS Application Load Balancer</p> <p>Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This issue only impacts HTTP/2 ALB target groups.</p> <p>To remediate this issue, customers should enable the &#34;Inspect after sufficient data&#34; target group configuration associated to an ALB load balancer. Refer to: ( https://docs.aws.amazon.com/elasticloadbalancing/latest/application/edit-target-group-attributes.html#waf-http2-inspection )</p> https://cve.radiocsirt.org/vuln/cve-2026-13763