Critical RCE Vulnerability in Apache HTTP Server

Re:Critical RCE Vulnerability in Apache HTTP Server by kbenson on Wednesday November 11, 2026 @11:16PM (#50463012)

I saw that too. CVE-2026-111497 is the Brotli CVE, so my guess is they reused that prior page as a base to start with and missed changing that.

[ Parent | on HN ]

Re:Critical RCE Vulnerability in Apache HTTP Server by 2bird3 on Wednesday November 11, 2026 @11:27PM (#50463077)

You'd think they'd have an LLM reviewing this by now. On the up side, it is refreshing to see good ol' human error still around on the surface!

[ Parent | on HN ]

Re:Critical RCE Vulnerability in Apache HTTP Server by davisr on Thursday November 12, 2026 @01:01AM (#50463592)

What makes you think it's not already an LLM error?

[ Parent | on HN ]

Re:Critical RCE Vulnerability in Apache HTTP Server by brabel on Thursday November 12, 2026 @01:20AM (#50463695)

Even a tiny model would pick up an error like this during review.

[ Parent | on HN ]

Re:Critical RCE Vulnerability in Apache HTTP Server by iririririr on Thursday November 12, 2026 @02:55AM (#50464278)

just had claude today spew some basic firewall rules for port 5900 and 5901... it used 5900 and 59001

[ Parent | on HN ]

Re:Critical RCE Vulnerability in Apache HTTP Server by amluto on Thursday November 12, 2026 @05:46AM (#50465454)

Even a tiny model might, if promoted correctly.

Even the latest and greatest big models miss trivial errors when simply asked to review a chunk of text.

[ Parent | on HN ]

Re:Critical RCE Vulnerability in Apache HTTP Server by spuz on Thursday November 12, 2026 @02:38AM (#50464168)

If you use modern LLMs a lot you'll know they are much better at catching these kind of copy and paste errors than humans are.

[ Parent | on HN ]