CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 71.5%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2026-119618

Apache » Http Server » Version: 2.4.55

cpe:2.3:a:apache:http_server:2.4.55
Apache » Http Server » Version: 2.4.56

cpe:2.3:a:apache:http_server:2.4.56
Apache » Http Server » Version: 2.4.57

cpe:2.3:a:apache:http_server:2.4.57
Apache » Http Server » Version: 2.4.58

cpe:2.3:a:apache:http_server:2.4.58
Apache » Http Server » Version: 2.4.59

cpe:2.3:a:apache:http_server:2.4.59
Apache » Http Server » Version: 2.4.60

cpe:2.3:a:apache:http_server:2.4.60
Apache » Http Server » Version: 2.4.61

cpe:2.3:a:apache:http_server:2.4.61
Apache » Http Server » Version: 2.4.62

cpe:2.3:a:apache:http_server:2.4.62
Apache » Http Server » Version: 2.4.63

cpe:2.3:a:apache:http_server:2.4.63
Apache » Http Server » Version: 2.4.64

cpe:2.3:a:apache:http_server:2.4.64
Apache » Http Server » Version: 2.4.65

cpe:2.3:a:apache:http_server:2.4.65
Apache » Http Server » Version: 2.4.66

cpe:2.3:a:apache:http_server:2.4.66
Apache » Http Server » Version: 2.4.67

cpe:2.3:a:apache:http_server:2.4.67
Apache » Http Server » Version: 2.4.68

cpe:2.3:a:apache:http_server:2.4.68
Apache » Http Server » Version: 2.4.69

cpe:2.3:a:apache:http_server:2.4.69
Apache » Http Server » Version: 2.4.70

cpe:2.3:a:apache:http_server:2.4.70
Icing » Mod Http2 » Version: 2.0.10

cpe:2.3:a:icing:mod_http2:2.0.10
Icing » Mod Http2 » Version: 2.0.11

cpe:2.3:a:icing:mod_http2:2.0.11
Icing » Mod Http2 » Version: 2.0.12

cpe:2.3:a:icing:mod_http2:2.0.12
Icing » Mod Http2 » Version: 2.0.13

cpe:2.3:a:icing:mod_http2:2.0.13
Icing » Mod Http2 » Version: 2.0.14

cpe:2.3:a:icing:mod_http2:2.0.14
Icing » Mod Http2 » Version: 2.0.15

cpe:2.3:a:icing:mod_http2:2.0.15
Icing » Mod Http2 » Version: 2.0.16

cpe:2.3:a:icing:mod_http2:2.0.16
Icing » Mod Http2 » Version: 2.0.17

cpe:2.3:a:icing:mod_http2:2.0.17
Icing » Mod Http2 » Version: 2.0.18

cpe:2.3:a:icing:mod_http2:2.0.18
Icing » Mod Http2 » Version: 2.0.19

cpe:2.3:a:icing:mod_http2:2.0.19
Icing » Mod Http2 » Version: 2.0.20

cpe:2.3:a:icing:mod_http2:2.0.20
Icing » Mod Http2 » Version: 2.0.21

cpe:2.3:a:icing:mod_http2:2.0.21
Icing » Mod Http2 » Version: 2.0.22

cpe:2.3:a:icing:mod_http2:2.0.22
Icing » Mod Http2 » Version: 2.0.23

cpe:2.3:a:icing:mod_http2:2.0.23
Icing » Mod Http2 » Version: 2.0.24

cpe:2.3:a:icing:mod_http2:2.0.24
Icing » Mod Http2 » Version: 2.0.25

cpe:2.3:a:icing:mod_http2:2.0.25
Icing » Mod Http2 » Version: 2.0.26

cpe:2.3:a:icing:mod_http2:2.0.26
Icing » Mod Http2 » Version: 2.0.27

cpe:2.3:a:icing:mod_http2:2.0.27
Icing » Mod Http2 » Version: 2.0.28

cpe:2.3:a:icing:mod_http2:2.0.28
Icing » Mod Http2 » Version: 2.0.29

cpe:2.3:a:icing:mod_http2:2.0.29
Icing » Mod Http2 » Version: 2.0.30

cpe:2.3:a:icing:mod_http2:2.0.30
Icing » Mod Http2 » Version: 2.0.31

cpe:2.3:a:icing:mod_http2:2.0.31
Icing » Mod Http2 » Version: 2.0.32

cpe:2.3:a:icing:mod_http2:2.0.32
Icing » Mod Http2 » Version: 2.0.33

cpe:2.3:a:icing:mod_http2:2.0.33
Icing » Mod Http2 » Version: 2.0.34

cpe:2.3:a:icing:mod_http2:2.0.34
Icing » Mod Http2 » Version: 2.0.35

cpe:2.3:a:icing:mod_http2:2.0.35
Icing » Mod Http2 » Version: 2.0.36

cpe:2.3:a:icing:mod_http2:2.0.36
Icing » Mod Http2 » Version: 2.0.37

cpe:2.3:a:icing:mod_http2:2.0.37
Icing » Mod Http2 » Version: 2.0.38

cpe:2.3:a:icing:mod_http2:2.0.38
Icing » Mod Http2 » Version: 2.0.39

cpe:2.3:a:icing:mod_http2:2.0.39
Icing » Mod Http2 » Version: 2.0.40

cpe:2.3:a:icing:mod_http2:2.0.40
Icing » Mod Http2 » Version: 2.0.41

cpe:2.3:a:icing:mod_http2:2.0.41
Icing » Mod Http2 » Version: 2.0.8

cpe:2.3:a:icing:mod_http2:2.0.8
Icing » Mod Http2 » Version: 2.0.9

cpe:2.3:a:icing:mod_http2:2.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-119618

Products

Pricing

Contact Us