Apache has fixed a critical bug in its HTTP/2 module that could let a remote attacker run code on a web server. The flaw is tracked as CVE-2026-119618 and affects mod_http2. The fix came on November 11, 2026, in Apache HTTP Server 2.4.71. The bug sits in a function called assign_headers(). Apache says it is […]
This article has been indexed from Cyber Security News
Read the original article:
Apache Patches Critical HTTP/2 Flaw Allowing Remote Code Execution on Web Servers