TechForLive

HN The Hacker News · · Security

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
Image: The Hacker News

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71…

The Hacker News

TechForLive shows the headline, the short excerpt and the picture the newsroom shares in its public feed. The reporting belongs to The Hacker News.