Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a mod_http2 flaw rated critical; Red Hat cites public exploit research, Wiz said none was available
Apache's advisory credits Anthropic's OSS Scanner and two Google Cloud researchers for CVE-2026-119618 in HTTP Server 2.4.55 through 2.4.70; Red Hat and Wiz gave different accounts of whether an exploit was public.