Skip to content
BlurtekBlurtek
Let’s talk
← Back to blog
Cybersecurity

XRING: What We Actually Know About the Unpatched HTTP/3 0-Day

XRING, the alleged unpatched HTTP/3 0-day exploiting QPACK, is spreading without a CVE or official advisory. Here's the real mechanism and how to verify it.

Blurtek
1 min read77 words

XRING is circulating without a CVE or official advisory as an alleged unpatched HTTP/3 0-day exploiting QPACK with 260 bytes of traffic. Here's the real mechanism and how to verify your exposure before reacting.

01

What is actually being claimed about XRING

02

Why '260 bytes via QPACK' is technically plausible

03

The real precedent: HTTP/2 Rapid Reset (CVE-2023-44487)

04

The uncomfortable truth: your SME may not expose HTTP/3 directly

At Blurtek we map your real internet-facing exposure, without selling fear.

Request an assessment
← Back to blogGet a diagnosis
WE START BY LISTENING

Your next step,
thought through together.

Tell us what needs to improve. We help you decide where to start and what is worth building.

Tell us about your project
admin@blurtek.com+34 604 84 48 03Lleida · Spain