8.8
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free --- What's the...
Basic Information
ID
AEE4B3AA-4C98-5A59-B89E-B854736F36DA
Published
May 13, 2026 at 08:24
Modified
May 13, 2026 at 08:28