Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

Source: SecurityWeek · 2026-11-12