Resolved on November 12, 2026.
CVE-2026-119618 On 11 November 2026, a critical security flaw was made public in Apache HTTP Server. The flaw only affects servers that use a specific optional component for a newer connection method called HTTP/2. Phished is not affected. No action is needed from you. We checked our systems on the day the flaw was announced. Our services are not impacted by this vulnerability. We continue to monitor the situation and will update this statement if anything changes.
Update timeline
- investigating Nov 12, 2026, 01:26 PM UTC
CVE-2026-119618 On 11 November 2026, a critical security flaw was made public in Apache HTTP Server. The flaw only affects servers that use a specific optional component for a newer connection method called HTTP/2. Phished is not affected. No action is needed from you. We checked our systems on the day the flaw was announced. Our services are not impacted by this vulnerability. We continue to monitor the situation and will update this statement if anything changes.
Your product runs on more than Phished
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services