<![CDATA[mod_http security issue (CVE-2026-119618)]]>Hi Cloudron team, any advice from your side about the CVE mod_http ? So far I can see under our apps, WP, Dolibarr and Nextcloud are using Apache 2.4.66 should we stop them until a new update is available?

]]>https://forum.cloudron.io/topic/16293/mod_http-security-issue-cve-2026-119618RSS for NodeSat, 14 Nov 2026 00:25:05 GMTFri, 13 Nov 2026 16:36:42 GMT60<![CDATA[Reply to mod_http security issue (CVE-2026-119618) on Fri, 13 Nov 2026 17:32:53 GMT]]>@girish Thanks for the quick clarification, that is great news!

]]>https://forum.cloudron.io/post/132849https://forum.cloudron.io/post/132849Fri, 13 Nov 2026 17:32:53 GMT<![CDATA[Reply to mod_http security issue (CVE-2026-119618) on Fri, 13 Nov 2026 16:54:42 GMT]]>@giofonseca I think the security report is about http2 which the apps do not use. Also, cloudron uses nginx in the frontend, and communicates with the apache of the apps via http (so we don't use http2 module).

]]>https://forum.cloudron.io/post/132847https://forum.cloudron.io/post/132847Fri, 13 Nov 2026 16:54:42 GMT