SecuritySlashdotabout 1 hour ago
Apache HTTP/2 Flaw Allows Remote Code Execution
1 min read
A critical flaw tracked as CVE-2026-119618 affects Apache HTTP Server versions 2.4.55 through 2.4.70 when HTTP/2 is enabled, allowing unauthenticated attackers to remotely execute code. The vulnerability is fixed in version 2.4.71, which also addresses a crash in modmd and a low-rated memory overwrite issue.
Level
Hype check
Tap to vote and see what everyone thinks.
