The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

The post Apache Patches Critical HTTP Server RCE Found by Anthropic, Google appeared first on SecurityWeek.

https://www.securityweek.com/apache-patches-critical-http-server-rce-found-by-anthropic-google/