Tag
#Apache
Apache HTTP Server HTTP/2 RCE, Fixed in 2.4.71 (CVE-2026-119618)
A thread-safety flaw in Apache HTTP Server's mod_http2 lets an unauthenticated HTTP/2 client corrupt memory and possibly run code; fixed in 2.4.71.
Nov 12, 2026