The Hacker News5h agoenergy 101
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
image: The Hacker News
A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.