A severe vulnerability in the Apache HTTP Server’s mod_http2 module, tracked as CVE-2026-119618, allows unauthenticated remote attackers to execute arbitrary code. The flaw affects versions 2.4.55 through 2.4.70 on servers with HTTP/2 enabled. Administrators must upgrade immediately to version 2.4.71 to mitigate potential exploitation.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →