CVE-2026-119618 described as Apache HTTP/2 race-condition RCE
Original title: CVE-2026-119618: Apache HTTP/2 Race Condition RCE
The available text is a title and site navigation, with no versions, patch, or exploitation status.
A SOCRadar item is titled as coverage of CVE-2026-119618, described as a race condition in Apache HTTP/2 that can lead to remote code execution. The supplied text is site navigation and does not state affected versions, a fixed release, proof-of-concept availability, or whether the flaw is being exploited.
Unconfirmed: No technical details, affected versions, fix, or exploitation status appear in the provided text.
- The identifier given is CVE-2026-119618.
- The title characterizes the issue as an HTTP/2 race condition leading to RCE.
Impact: Remote code execution via an HTTP/2 race condition
| Product | Affected |
|---|---|
| Apache HTTP Server | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-119618 | Race condition RCE in Apache HTTP Server mod_http2 | 8.1 | <1% | PoC ×9 |
From the original article
11 min read at socradar.io
The Apache Software Foundation has released Apache HTTP Server 2. 4. 71 to fix CVE-2026-119618, a critical race...
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.