CVE-2026-119618 (critical): mod_HTTP2: heap corruption and RCE in assign_headers
klaas-
28 points
9 comments
November 11, 2026
Related Discussions
Found 5 related stories in 139.2ms across 12,324 title embeddings via pgvector HNSW
- Critical RCE Vulnerability in Apache HTTP Server soheilpro · 86 pts · November 12, 2026 · 70% similar
- CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation cobychapple · 38 pts · October 30, 2026 · 60% similar
- Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming petecooper · 145 pts · October 20, 2026 · 59% similar
- Potential third critical PHP CVE mpaepper · 64 pts · October 21, 2026 · 57% similar
- TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 oger · 438 pts · October 31, 2026 · 56% similar
Discussion Highlights (4 comments)
klaas-
Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618
pixl97
Seems kind of gnarly. How hard is this to trigger?
nubinetwork
> from 2.4.55 through 2.4.70. Looks at ubuntu... 2.4.52. Well then.
Sohcahtoa82
I'm tired, boss.