UBUNTU-CVE-2026-119618: High severity ubuntu/apache2 vulnerability
Published Nov 12, 2026
·Updated
modhttp2: heap corruption and RCE in assignheaders
Affected Software
8 affected components
ubuntu/apache2*
ubuntu/apache2*
ubuntu/apache2*
ubuntu/apache2*
ubuntu/apache2*
ubuntu/apache2*
ubuntu/apache2*
ubuntu/apache2*
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which deployments should be prioritized for investigation?
The affected software is identified as Ubuntu apache2 deployments.
2
Are affected versions or temporary mitigations specified?
No affected version range, fixed version, configuration prerequisite, or workaround is provided in the available data.