Apache HTTP Server 2.4.67 Fixes CVE-2026-23918 HTTP/2 RCE Risk
Apache HTTP Server 2.4.67 fixes CVE-2026-23918, an HTTP/2 double-free in 2.4.66 that can crash workers and may allow RCE in specific conditions.
Before you go
Scan your Windows PC for malware, adware, and unwanted programs with a lightweight cleanup tool trusted in our removal guides.
6-day trial available. Offer opens in the same tab.