CVE-2026-119618

modhttp2: heap corruption and RCE in assignheaders...

Exploit for CVE-2026-119618

CVE-2026-119618 — Apache HTTP Server modhttp2 assignheaders...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618

The Apache HTTP Server is affected by a critical vulnerability in the mod_http2 module within the assign_headers() function. The issue is caused by Concurrent Execution using Shared Resource with Improper Synchronization (CWE-362), which can lead to heap corruption and Remote Code Execution (RCE)...

EUVD-2026-123532

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618 Apache HTTP Server: mod_http2: heap corruption and RCE in assign_headers

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618: Apache Software Foundation Apache HTTP Server: Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's…

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...