> TritonInfoSec News
Home / Jul 12, 2026 / Story
0
#8 The Hacker News general July 10, 2026 at 11:47 UTC

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

By [email protected] (The Hacker News)

AI Summary

Researcher Sébastien Féry disclosed an unpatched denial-of-service flaw dubbed XRING in XQUIC, Alibaba's open-source QUIC and HTTP/3 library, which allows any unauthenticated remote client to crash an HTTP/3 server using approximately 260 bytes of valid QPACK traffic. No patch was available as of the July 8, 2026 disclosure, posing risk to any service built on XQUIC.

Read full article → https://thehackernews.com/2026/07/unpatched-xring-…

Relevance score: 72.0/100

# More from July 12

  1. 1
    Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install The Hacker News
  2. 2
    New U-Boot flaws could enable stealthy firmware attacks BleepingComputer
  3. 3
    Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages The Hacker News
  4. 4
    Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions The Hacker News
  5. 5
    ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism SecurityWeek
  6. 6
    'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets BleepingComputer
  7. 7
    Former ransomware negotiator gets 4 years for BlackCat attacks BleepingComputer
  8. 9
    Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched The Hacker News
  9. 10
    Network of 200 GitHub Repositories Used for Malware Infection SecurityWeek