Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

14 hours ago [email protected] (The Hacker News)

A critical flaw in Apache HTTP Server’s HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday.

Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux.

An attacker who can reach the

The post “Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)

Tags: Critical Severity, Hacker, Hacker News, Linux

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

2 hours ago [email protected] (The Hacker News)

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

3 hours ago [email protected] (The Hacker News)

Vulnerabilities

New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access

7 hours ago [email protected] (The Hacker News)

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

9 hours ago [email protected] (The Hacker News)

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients