N
Hacker Next
new
past
show
ask
show
jobs
submit
login
▲
CVE-2026-119618 (critical): mod_HTTP2: heap corruption and RCE in assign_headers
(
httpd.apache.org
)
39 points by
klaas-
2 days ago
|
9 comments
add comment
Rendered at 07:39:27 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
klaas- 2 days ago
[-]
Red Hat has released updates
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618
rustyhancock 1 days ago
[-]
BRB Setting a calender reminder for the new year to install patches canonical puts out.
Sohcahtoa82 2 days ago
[-]
I'm tired, boss.
pixl97 2 days ago
[-]
Seems kind of gnarly. How hard is this to trigger?
Sohcahtoa82 1 days ago
[-]
Until that's answered, I'm going to consider this a Nothingburger.
pixl97 1 days ago
[-]
Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
rustyhancock 2 days ago
[-]
Time for StealMyBitcoinAgain.com ?
Remember to make it unexploitable for the first 16 hours.
nubinetwork 2 days ago
[-]
> from 2.4.55 through 2.4.70.
Looks at ubuntu... 2.4.52. Well then.
linsomniac 1 days ago
[-]
26.04 has 2.4.66-2ubuntu2.7
Remember to make it unexploitable for the first 16 hours.
Looks at ubuntu... 2.4.52. Well then.