Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely
TN

The Hacker News

34m ago
0 0

Discussion

Break the silence

Take the opportunity to kick things off.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Chinese AI Project Scouts Spies in Taiwan Chip Industry

The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Li…
DR

Dark Reading

3h ago
0
bleepingcomputer.com
Baker Tilly notifies clients of data breach at third-party prov…

The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents. [. .. ]
MA

maya af

4h ago
0
darkreading.com
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted…

The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government's new active cyber-def…
DR

Dark Reading

5h ago
0
bleepingcomputer.com
eMudhra revokes 8 more CA certificates after private key mishap

Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its recent certificate security incident fo…
SA

SariMartinez

7h ago
0
darkreading.com
Attackers Say 'Hello' to a Different Scale of Cloud Attack

Researchers dubbed an attack chain "Greeter" after discovering that attackers deliberately covered their trail by leaving "hello" messages…
DR

Dark Reading

9h ago
0
thehackernews.com
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote…

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege…
Thanakorn Boon

Thanakorn Boon

12h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote…

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege…
Thanakorn Boon

Thanakorn Boon

12h ago
0
thehackernews.com
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confid…

Of the 37, 571 Grok-built apps that security company Claroc found online, 35, 578 were open to anyone without a sign-in, the researchers said yesterday. They…
Thanakorn Boon

Thanakorn Boon

15h ago
0
thehackernews.com
Git Patches Flaw That Lets Malicious Repositories Execute Code …

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fix…
Carlos the great

Carlos the great

1d ago
0
thehackernews.com
Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Pyth…

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. Th…
TN

The Hacker News

1d ago
0
thehackernews.com
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wa…

An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login…
TN

The Hacker News

1d ago
0
thehackernews.com
Google Issues Chrome Security Update for Eighth Actively Exploi…

Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity…
TA

taylor??

1d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest