The HTTP/2 Bomb Sat in Plain Sight for a Decade. An AI Just Had to Read the Code.CVE-2026-49975 will be patched in weeks. The condition that produced it won't be.Jun 4, 2026·9 min read