Open-source foundation
Appears in 1 story · Last updated Nov 13, 2026
Maintains Apache HTTP Server; released 2.4.71
Apache released HTTP Server 2.4.71 on November 11, 2026, closing a race condition in the module that handles HTTP/2 traffic. The flaw, CVE-2026-119618, lets an unauthenticated request corrupt a server process's memory and potentially run attacker code. Every release from 2.4.55 through 2.4.70 is affected when HTTP/2 is enabled.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
