All news
Apache HTTP Server: critical HTTP/2 flaw can lead to code execution – update to 2.4.71
Apache HTTP Server 2.4.71, released November 11, fixes CVE-2026-119618, rated critical by the project. A race condition in the HTTP/2 module (mod_http2) can corrupt memory and lead to remote code execution in versions 2.4.55 through 2.4.70. Cloud security firm Wiz says exploiting it needs no login, and that no exploit or attacks were known when it published.