Vulnerabilities
2026-11-12 · just now
Source: The Hacker News
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
Summary
A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the
For more information, read the full story at the original source: The Hacker News ↗