CVE-2026-48913
Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.67.
- Published Jun 8, 2026
- CVSS 7.3 high
- 1.1% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Multiple vulnerabilities in IBM products CERT-FR ·