mod_h2

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 11, 2026
Last mentioned1h ago

Timeline

2 articles · newest first

Apache HTTP Server HTTP/2 flaw CVE-2026-119618 allows unauthenticated RCENew

Apache 2.4.55 through 2.4.70 is affected and 2.4.71 is fixed; Wiz reports no exploit or known attacks.

Wiz Blog19:49 UTC · 1h agoVulnerability 4 sourcesCVE-2026-1196181 · 1 read

Apache HTTP Server mod_http2 heap bug can yield RCE (CVE-2026-119618)

The advisory rates the assign_headers race critical and also covers mod_h2 2.0.8 through 2.0.42.

oss-securityupdated 19:49 UTC · 1h agofirst 16:40 UTC · 4h agoVulnerability 4 sourcesCVE-2026-119618

Related CVEs

by mentions

CVE-2026-119618—
Race condition RCE in Apache HTTP Server mod_http2
published 6h agoApache HTTP ServerPoC

Appears with

mod_http2product · 2
Apache HTTP Serverproduct · 2
Apache Software Foundationvendor · 2
Anthropicorganization · 1
Google Cloudorganization · 1

Entities are extracted by the model from each article. First seen Nov 11, 2026, last mentioned 1h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.