News for hackers. Stuff that matters.

A comment on Critical RCE Vulnerability in Apache HTTP Server. Parent comment

Re:Critical RCE Vulnerability in Apache HTTP Server by Woodi on Thursday November 12, 2026 @06:12AM (#50465616)
But if you have more then one httpd server - eg. some fcgi - then HTTP/1.1 is almost architectural backdor: HTTP Request Smuggling, at minimum.

Apache even don't have it's own HTTP/2: mod_http2 use external library nghttp2[.org] so Apache is dead shell at this point.

[ Parent | on HN ]

There are no comments on this comment yet.