As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-119618: Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache HTTP Server versions 2.4.55 through 2.4.70 contain a concurrent execution vulnerability in the mod_http2 module's assign_headers() function that can lead to heap corruption and remote code execution (RCE). The flaw stems from improper synchronization when multiple threads access shared resources. Versions 2.0.8 through 2.0.42 of mod_h2 from GitHub are also affected.
Why it matters: Organizations running Apache HTTP Server 2.4.55 to 2.4.70 face critical RCE risk and must apply patches immediately; this is a high-priority vulnerability for any web infrastructure using affected versions.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-119618: Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache HTTP Server versions 2.4.55 through 2.4.70 contain a concurrent execution vulnerability in the mod_http2 module's assign_headers() function that can lead to heap corruption and remote code execution (RCE). The flaw stems from improper synchronization when multiple threads access shared resources. Versions 2.0.8 through 2.0.42 of mod_h2 from GitHub are also affected.
Why it matters: Organizations running Apache HTTP Server 2.4.55 to 2.4.70 face critical RCE risk and must apply patches immediately; this is a high-priority vulnerability for any web infrastructure using affected versions.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-119618: Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache HTTP Server versions 2.4.55 through 2.4.70 contain a concurrent execution vulnerability in the mod_http2 module's assign_headers() function that can lead to heap corruption and remote code execution (RCE). The flaw stems from improper synchronization when multiple threads access shared resources. Versions 2.0.8 through 2.0.42 of mod_h2 from GitHub are also affected.
Why it matters: Organizations running Apache HTTP Server 2.4.55 to 2.4.70 face critical RCE risk and must apply patches immediately; this is a high-priority vulnerability for any web infrastructure using affected versions.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-119618: Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache HTTP Server versions 2.4.55 through 2.4.70 contain a concurrent execution vulnerability in the mod_http2 module's assign_headers() function that can lead to heap corruption and remote code execution (RCE). The flaw stems from improper synchronization when multiple threads access shared resources. Versions 2.0.8 through 2.0.42 of mod_h2 from GitHub are also affected.
Why it matters: Organizations running Apache HTTP Server 2.4.55 to 2.4.70 face critical RCE risk and must apply patches immediately; this is a high-priority vulnerability for any web infrastructure using affected versions.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-119618: Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers
Apache HTTP Server versions 2.4.55 through 2.4.70 contain a concurrent execution vulnerability in the mod_http2 module's assign_headers() function that can lead to heap corruption and remote code execution (RCE). The flaw stems from improper synchronization when multiple threads access shared resources. Versions 2.0.8 through 2.0.42 of mod_h2 from GitHub are also affected.
Why it matters: Organizations running Apache HTTP Server 2.4.55 to 2.4.70 face critical RCE risk and must apply patches immediately; this is a high-priority vulnerability for any web infrastructure using affected versions.
- Source published
- First seen by Cybersecurity Tracker