High 2 vendors · 2 advisories

CVE-2026-23918

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

High8.8Apache HTTP Server: Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.May 4, 2026

Linux1 advisory

High8.8Remote Code Execution via Double Free in HTTP/2 ProtocolMay 4, 2026

CVE-2026-23918 — high severity, 2 vendors affected · VulniPulse