{"uuid": "78ccbc17-92cd-460f-86f8-dff2d6828f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://t.me/VulnerabilityNews/42334", "content": "Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE\n\nThe Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to remote code execution (RCE).\nThe vulnerability, tracked as CVE-2026-23918 (CVSS score: 8.8), has been described as a case of \"double free and possible RCE\" in the HTTP/2 protocol handling. This issue\nhttps://thehackernews.com/2026/05/critical-apache-http2-flaw-cve-2026.html", "creation_timestamp": "2026-09-18T05:00:07.798776Z"}