Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer
vulnerability Imported story

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Source: The Hacker News · Published · Last checked 4 minutes ago · 1 min read
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
Image: The Hacker News
Read original source ↗ (thehackernews.com)

Publisher excerpt From The Hacker News

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.

Related CVEs

CVE-2026-119618 · HIGH
Keywords: CVE-2026-119618vulnerabilityvulnerability newsThe Hacker Newscybersecurity newssecurity news Pakistan

Reference: The Hacker News — thehackernews.com ↗

Related news

The firewall becomes the foothold: Attackers turn Check Point gateways against customersCVE-2026-119856 Win32k Information Disclosure VulnerabilityCVE-2026-121680 Windows NTLM Spoofing VulnerabilityChromium CVE-2026-126920: Information leak