{"uuid": "9676aa14-5cff-40e7-9621-8918fffac3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-23918", "type": "seen", "source": "https://t.me/thehackernews/8941", "content": "\ud83d\udea8 Apache patches CVE-2026-23918 (CVSS 8.8) in HTTP Server 2.4.66.\n\nThe HTTP/2 double-free flaw can trigger DoS and potentially enable remote code execution via crafted requests. Fixed in 2.4.67.\n\nDetails here: https://thehackernews.com/2026/05/critical-apache-http2-flaw-cve-2026.html", "creation_timestamp": "2026-05-05T16:26:43.000000Z"}