Unverified
Gathered automatically from the outlets below; our newsroom hasn't checked it yet.
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed…
What's new
- New headline Was: “Apache HTTP Server 2.4.71 patches critical HTTP/2 race-condition RCE”
- SecurityOnline is now reporting this
- Our desk updated its story
- The Hacker News is now reporting this
- wiz.io is now reporting this
2 earlier updates
- New headline Was: “Critical RCE Vulnerability in Apache HTTP Server”
- Our desk filed its story
How it’s being reported
2 sources
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
Leads with a figure in the headline.
A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed…
Critical RCE Vulnerability in Apache HTTP Server
Gives this outlet’s account of the story.