Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

Reported by SecurityWeek (Eduard Kovacs)

Summary by Cyber Security News12 Nov 2026, 16:38 CET

About this summary. This is a short excerpt from the description that SecurityWeek published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.securityweek.com/apache-patches-critical-http-server-rce-found-by-anthropic-google/

The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

Read the full article at SecurityWeek →

Source attribution: headline and facts are from SecurityWeek (securityweek.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site Owners Should Know

CVE-2026-119618 | Apache HTTP Server mod_http2 Race Condition Remote Code Execution Vulnerability

CVE-2026-119618: What We Know About the Critical Apache mod_http2 Race Condition

Critical RCE Vulnerability in Apache HTTP Server: Everything You Need To Know

CVE-2026-119618: Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers

NCSC-2026-0467 [1.00] [M/H] Kwetsbaarheden verholpen in Google Android en Samsung Mobile