Critical vulnerability found in Apache HTTP Server mod_http2 and mod_h2 modules

CRITICAL // SOURCE: ncsc.nl 12 Nov 2026, 14:22

// AI SUMMARY — the text below is automatically generated and may contain inaccuracies. Read the full, original article at the source below.

A critical vulnerability (CVE-2026-119618) carrying a CVSS score of 9.8 has been identified in the Apache HTTP Server, specifically affecting the mod_http2 and mod_h2 modules. While the likelihood of exploitation is rated as medium, the potential damage to systems is severe. Administrators are strongly advised to apply the latest Apache updates immediately to secure their environments.

apachecve-2026-119618http2vulnerability

READ THE ORIGINAL ARTICLE AT NCSC.NL →