1 article

# CVE-2026-23918

─── TAG ───

Technology Nov 14, 2026 · 1 min read

Apache HTTP Server: Critical RCE Vulnerability (CVE-2026-119618)

Apache released HTTP Server 2.4.71 to fix CVE-2026-119618, a heap corruption flaw in mod_http2 that can lead to remote code execution. Affects Apache HTTP Server 2.4.55 through 2.4.70 with HTTP/2 enabled.

Apache HTTP Server security bulletin for CVE-2026-119618 heap corruption in mod_http2