Apache's HTTP/2 flaw: a critical web server bug found by an AI scanner
Notes de l’épisode
Morning edition, Friday 13 November 2026
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical remote code execution flaw in the HTTP/2 module that Anthropic's scanner and Google researchers found independently. Also: Maersk's inherited system, and a Microsoft 365 outage.
Sources
- Apache HTTP Server 2.4 vulnerabilities (CVE-2026-119618)
- Wiz: Critical RCE Vulnerability in Apache HTTP Server
- SecurityWeek: Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
- BleepingComputer: Apache HTTP Server patches critical HTTP/2 remote code execution flaw
- BleepingComputer: Maersk confirms data breach as WhiteArmor ransomware demands $5 million
- SecurityWeek: Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams