h2oai

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

h2oai records in CISA KEV

No h2oai vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Quicly · all components

TI-2026-32377 CVE-2026-44436

LOW 39

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00493 Published 2026-07-16 Fixed in 8b178e6 CWE-120

TI-2026-32376 CVE-2026-44435

LOW 39

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-07-16 Fixed in 937d0e9 CWE-400

TI-2026-32374 CVE-2026-44433

LOW 39

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-07-16 Fixed in 8b178e6 CWE-400

TI-2025-38115 CVE-2025-61684

LOW 39

Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a102b57d840e39b0311ce5c9e14e.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00395 Published 2026-01-19 No fix listed CWE-20

TI-2026-32375 CVE-2026-44434

LOW 29

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2026-07-16 No fix listed CWE-345