Skip to main content
Scan free
CVE Radar
High Actively ExploitedNginx

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS Base Score
7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Probability
100%EPSS PERCENTILE0100

More exploitable than 100% of all CVEs · Top 0%

Is your site exposed to this?

Run a free scan. UNPWNED fingerprints your stack and flags this CVE class if the affected technology is detected.

Check my site
Details
Published
2023-10-10
Last modified
2026-08-11
Added to CISA KEV
2023-10-10
Affected
Nginx, OpenResty, Caddy, ASP.NET, Node.js
References
NVD Detail OSV.dev GitHub Advisories

Related exploited CVEs in Nginx

CVE-2023-36899
High · 8.8 CVSSASP.NET
CVE-2026-42945
High · 8.1 CVSSNginx
CVE-2026-27654
High · 8.2 CVSSNginx
CVE-2023-38180
High · 7.5 CVSSASP.NET

Data from the National Vulnerability Database (NVD), CISA KEV, and FIRST.org EPSS. This product uses the NVD API but is not endorsed or certified by the NVD. EPSS is a probability estimate, not a guarantee of exploitation.