The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

Excerpt from SecurityWeek

GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at SecurityWeek:

Read the full story at SecurityWeek →