Security
Is your Apache server affected by CVE-2026-119618? How to check and fix the HTTP/2 flaw
Your Apache server is exposed to CVE-2026-119618 only if mod_http2 is loaded and HTTP/2 (h2 or h2c) is enabled, on 2.4.55 through 2.4.70 or a distribution build with the affected module. Check that first, then patch to httpd 2.4.71 or your distribution fix, and turn HTTP/2 off until it arrives.