> TritonInfoSec News
Home / Nov 13, 2026 / Story
0
#4 The Hacker News general November 12, 2026 at 05:12 UTC

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

By [email protected] (The Hacker News)

AI Summary

CVE-2026-119618, a critical race condition in Apache HTTP Server's mod_http2 module, allows unauthenticated remote code execution on servers running versions 2.4.55 through 2.4.70 with HTTP/2 enabled; the fix is in version 2.4.71. Notably discovered by researchers from Anthropic and Google, the flaw affects widely deployed Apache installations including those shipped with Red Hat Enterprise Linux.

Read full article → https://thehackernews.com/2026/11/critical-apache-…

Relevance score: 84.0/100

# More from November 13

  1. 1
    Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 The Hacker News
  2. 2
    New N-able "4EverAble2Shell" zero-day exploited hours after PoC released BleepingComputer
  3. 3
    US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance CyberScoop
  4. 5
    International operation dismantles malware networks, exposes 6.4 million stolen credentials CyberScoop
  5. 6
    ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients The Hacker News
  6. 7
    Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass The Hacker News
  7. 8
    New Windows SignDrop zero-day gives hackers SYSTEM privileges BleepingComputer
  8. 9
    Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories The Hacker News
  9. 10
    AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets The Hacker News