Apache HTTP/2 RCE Vulnerability (CVE-2026-119618)

Update from November 12, 2026

The Dynatrace team has finished the analysis of the recently published HTTP/2 remote code execution vulnerability (CVE-2026-119618) affecting Apache. Dynatrace software is not impacted by this vulnerability.

Get article updates or report security vulnerabilities

Dynatrace takes a proactive approach in communicating security vulnerability information to customers. Learn more about Dynatrace security and our security policy. To report a security issue, email security@dynatrace.com.

RSS feed Report issue