HTTP/2 – Security Blog https://blog.siteguarding.com Thu, 12 Nov 2026 09:57:06 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg HTTP/2 – Security Blog https://blog.siteguarding.com 32 32 Apache HTTP/2 Host Check: What to Ask the Host https://www.siteguarding.com/security-blog/apache-http2-host-check/ Thu, 12 Nov 2026 09:57:06 +0000 https://www.siteguarding.com/security-blog/apache-http2-host-check/ Wiz reports CVE-2026-119618, a race in Apache HTTP Server mod_http2 assign_headers(), on versions 2.4.55 through 2.4.70, with 2.4.71 and newer as the fix. For a WordPress or Joomla site, an Apache HTTP/2 host check starts with the company that runs the server. Key takeaways A WordPress or Joomla site hits this bug only when the host’s Apache offers HTTP/2 on a build inside the range Wiz published.

Source

]]> CVE-2026-119618: Patch Apache or Disable HTTP/2 https://www.siteguarding.com/security-blog/apache-http2-cve-2026-119618/ Thu, 12 Nov 2026 09:31:56 +0000 https://www.siteguarding.com/security-blog/apache-http2-cve-2026-119618/ A critical Apache HTTP/2 vulnerability, CVE-2026-119618, lets a remote attacker with no login run code on Apache HTTP Server 2.4.55 through 2.4.70 when HTTP/2 is enabled. The upstream fix is 2.4.71, released 11 November 2026. The Hacker News reported the flaw the next day. The server in front of your WordPress or Joomla site is the target. Check whether h2 or h2c is on, and whether you or your...

Source

]]>