{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-12T00:15:54.637","vulnerabilities":[{"cve":{"id":"CVE-2026-119618","sourceIdentifier":"security@apache.org","published":"2026-11-11T15:17:15.900","lastModified":"2026-11-11T19:17:30.313","vulnStatus":"Received","cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.70.\nAffected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache HTTP Server","defaultStatus":"unaffected","versions":[{"version":"2.4.55","lessThanOrEqual":"2.4.70","versionType":"semver","status":"affected"}]}]}],"metrics":{},"weaknesses":[{"source":"security@apache.org","type":"Secondary","description":[{"lang":"en","value":"CWE-362"}]}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/11/11/13","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}