mod_http2 – Security Blog https://blog.siteguarding.com Thu, 12 Nov 2026 09:31:56 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg mod_http2 – Security Blog https://blog.siteguarding.com 32 32 CVE-2026-119618: Patch Apache or Disable HTTP/2 https://www.siteguarding.com/security-blog/apache-http2-cve-2026-119618/ Thu, 12 Nov 2026 09:31:56 +0000 https://www.siteguarding.com/security-blog/apache-http2-cve-2026-119618/ A critical Apache HTTP/2 vulnerability, CVE-2026-119618, lets a remote attacker with no login run code on Apache HTTP Server 2.4.55 through 2.4.70 when HTTP/2 is enabled. The upstream fix is 2.4.71, released 11 November 2026. The Hacker News reported the flaw the next day. The server in front of your WordPress or Joomla site is the target. Check whether h2 or h2c is on, and whether you or your...

Source

]]>