Mod_http2

Apache HTTP Server HTTP/2 HPACK Cookie-Merging Memory Bomb (CVE-2026-49975) new EPSS 31%CVE-2026-49975networkHIGHUnverified2026-07-05Apache httpd mod_http2 Double-Free Pre-Auth RCE - CVE-2026-23918 new EPSS 50%CVE-2026-23918webCRITICALPatched2026-05-17