Tag: cve 2026 119618

1 article

Server room interior with technicians in background and highlighted servers in foreground.

Apache Flaw Exposes Servers to Remote Code Execution

A critical bug in Apache HTTP Server's HTTP/2 module, tracked as CVE-2026-119618, allows unauthenticated remote attackers to run code on vulnerable servers, giving them full control of the server process. This severe flaw, rated 9.8 out of 10 on the CVSS scale, affects Apache HTTP Server releases 2.4.55 through 2.4.70.

Analyst 207