TechBooky

Critical Apache HTTP/2 Flaw Raises Remote Code Execution Risk

Administrators running Apache HTTP Server have a new security update to prioritise. The Apache Software Foundation says a ...
SecurityWeek

Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

Apache fixed CVE-2026-119618, a critical HTTP/2 flaw reported by Anthropic and Google that could enable unauthenticated code execution.
Security Boulevard

CVE-2026-119618: What We Know About the Critical Apache mod_http2 Race Condition

What Defenders Need to Know On November 11, 2026, the Apache Software Foundation disclosed CVE-2026-119618, a critical race condition in mod_http2, the module that provides HTTP/2 support in Apache ...
ZDNet

Apache web server bug grants root access on shared hosting environments

This week, the Apache Software Foundation has patched a severe vulnerability in the Apache (httpd) web server project that could --under certain circumstances-- allow rogue server scripts to execute ...
BleepingComputer

Apache fixes actively exploited zero-day vulnerability, patch now

The Apache Software Foundation has released version 2.4.50 of the HTTP Web Server to address two vulnerabilities, one of which is an actively exploited path traversal and file disclosure flaw. The ...