May 52026 Critical Apache HTTP/2 Flaw (CVE-2026–23918) Enables DoS and Potential RCE Apache fixes CVE-2026–23918 in HTTP/2; double-free flaw enables DoS and RCE, impacting version 2.4.66 users.