Unrated severityNVD Advisory· Published Nov 11, 2026
CVE-2026-119618
CVE-2026-119618
Description
Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.
This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: >=2.0.8,<2.0.42
- Range: from 2.4.55 through 2.4.70
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.