Google Cloud Vulnerability Research

Search everything

Mentions · 7d4
Mentions · 30d4
All mentions4
First seenNov 12, 2026
Last mentioned1d ago

Timeline

4 articles · newest first

Apache HTTP Server mod_http2 race can yield remote code execution

Versions 2.4.55 through 2.4.70 are fixed in 2.4.71; a public PoC shows heap corruption, not code execution.

Horizon3.aiupdated Nov 13, 12:38 UTC · 1d agofirst Nov 12, 20:17 UTC · 1d agoVulnerability 14 sourcesCVE-2026-1196181

Apache HTTP Server 2.4.71 patches critical remote code execution flaw

The critical flaw affects 2.4.55 through 2.4.70, and Apache cites no evidence of active exploitation.

GBHackersupdated Nov 13, 12:38 UTC · 1d agofirst Nov 12, 05:50 UTC · 2d agoVulnerability 14 sourcesCVE-2026-119618 CVE-2026-106023 CVE-2026-1091631

Apache HTTP Server 2.4.71 fixes critical HTTP/2 remote code execution

CVE-2026-119618 in mod_http2 affects 2.4.55 through 2.4.70; the CVE entry is still reserved and no workaround is listed.

Cyber Security Newsupdated Nov 13, 12:38 UTC · 1d agofirst Nov 12, 05:17 UTC · 2d agoVulnerability 14 sourcesCVE-2026-119618 CVE-2026-106023 CVE-2026-109163

CVE-2026-119618 in Apache mod_http2 allows unauthenticated remote code execution

Red Hat rates it 9.8 and claims a reliable public exploit, while Wiz reports no exploit and no attacks in the wild.

The Hacker Newsupdated Nov 13, 12:38 UTC · 1d agofirst Nov 12, 05:12 UTC · 2d agoVulnerability 14 sourcesCVE-2026-1196181

Related CVEs

by mentions

CVE-2026-119618<1%8.1
Race condition RCE in Apache HTTP Server mod_http2
published 2d agoApache HTTP ServerPoC ×9
CVE-2026-109163—
Stack buffer overflow in Apache HTTP Server mod_vhost_alias 2.4.69
published 2d agoApache HTTP Server
CVE-2026-106023—
NULL pointer dereference in Apache HTTP Server mod_md
published 2d agoApache HTTP Server

Appears with

Anthropicorganization · 4
mod_http2product · 3
mod_h2product · 3
Apache HTTP Serverproduct · 3
Apachevendor · 3
Red Hatvendor · 2
modvhostaliasproduct · 1
mod_mdproduct · 1
Wizorganization · 1
modmdproduct · 1
modhttp2product · 1
mod_vhost_aliasproduct · 1
HTTP Serverproduct · 1
Apache Software Foundationvendor · 1
modh2product · 1

Entities are extracted by the model from each article. First seen Nov 12, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.