// SLASHDOT — LINUX & OPEN SOURCE

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Published: 11/12/2026, 05:00 PM

A critical flaw in Apache HTTP Server's HTTP/2 module could allow unauthenticated attackers to remotely execute code and potentially take control of affected server processes. Tracked as CVE-2026-119618, the vulnerability affects Apache HTTP Server 2.4.55 through 2.4.70 when HTTP/2 is enabled and is...