Cybersecurity

XRING: What We Actually Know About the Unpatched HTTP/3 0-Day

XRING, the alleged unpatched HTTP/3 0-day exploiting QPACK, is spreading without a CVE or official advisory. Here's the real mechanism and how to verify it.

Blurtek

2026-07-117 min read34 palabras

XRING is circulating without a CVE or official advisory as an alleged unpatched HTTP/3 0-day exploiting QPACK with 260 bytes of traffic. Here's the real mechanism and how to verify your exposure before reacting.

What is actually being claimed about XRING

Why '260 bytes via QPACK' is technically plausible

The real precedent: HTTP/2 Rapid Reset (CVE-2023-44487)

The uncomfortable truth: your SME may not expose HTTP/3 directly

At Blurtek we map your real internet-facing exposure, without selling fear.

Solicitar diagnóstico

← Back to blog Get a diagnosis