NewsSecurityWeek
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
Teaser from the source
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled. The post Apache Patches Critical HTTP Server RCE Found by Anthropic, Google appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-119618Red Hat Security Advisory: mod_http2 security update
- CVE-2026-119618Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.
- CVE-2026-119618Debian apache2: security update
- CVE-2026-119618Apache HTTP Server: Race-Condition
- CVE-2026-119618Apache HTTP Server: Race-Condition
- CVE-2026-119618Apache HTTP Server: Mehrere Schwachstellen
Affected vendors and products
More on Anthropic
Other advisories
- Highpwn_watch:claude-dispatch-thisbash-extension-to-desktop-rce-nov-2026Claude Dispatch "ThisBash": any browser extension on claude.ai can make Claude Desktop run code, and Anthropic won't fix it
- HighCVE-2026-88968Anthropics Claude-code: TOCTOU-Race-Condition
- HighCVE-2026-88066Anthropics Claude-code: unkontrollierter Suchpfad
- HighCVE-2026-88968Anthropics Claude-code: TOCTOU-Race-Condition
- HighCVE-2026-88066Anthropics Claude-code: unkontrollierter Suchpfad
- HighCVE-2026-88066Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uv_spawn …
- Criticalpwn_watch:claude-code-vscode-extension-ssh-backdoor-oct-2026Trojanized Claude Code VS Code extension (Anthropic.claude-code 2.1.312 and 2.1.313) in Cursor's extension marketplace planted an SSH backdoor on up to 5,000 machines
- Highosv:MAL-2026-18189Malicious code in aanthropic (PyPI)
Other news entries
- Claude Code’s ‘don’t ask again’ button has a secrets-spilling problemNewsCSO Online
- Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox EscapesNewsSecurityWeek
- Anthropic sharpens AI coding and security capabilities with Mythos 5.2NewsCSO Online
- Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack BenchmarkNewsThe Hacker News
- Anthropic Claude Fable 5.2 ist günstiger, aber Tempo kostet extraNewsheise Security
- Anthropic's super bug-finding Mythos model is going into Cisco and IBM productsNewsThe Register — Security
- Attackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxNewsDark Reading
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubNewsThe Hacker News
Source: https://www.securityweek.com/apache-patches-critical-http-server-rce-found-by-anthropic-google/
ID