ChipokiaTech news, without the noise
← All stories

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with…

Preview courtesy of The Hacker News. The full article opens on their site.

Other coverage of this story

More from The Hacker News

Top today