Security Advisory: Apache HTTP/2 Vulnerability (CVE-2026-119618)

We are continuing to actively roll out patches across our fleet. We will provide further updates as this work is completed.

We are continuing to work on a fix for this issue.

Our Engineering team has applied the required Apache security updates to the affected Cloudhosts.

A small number of servers require additional work and are being addressed individually. We are continuing to monitor the servers to verify that the updates have been successfully applied and that services are operating as expected.

We will continue to monitor the situation and provide updates as needed.

If you have any questions or need assistance, please contact our Support team.

We are aware of a recently disclosed critical security vulnerability, CVE-2026-119618, affecting the HTTP/2 implementation in Apache HTTP Server (mod_http2). Under certain conditions, this vulnerability could potentially allow remote code execution through specially crafted HTTP/2 requests.

We will be applying patches across our hosting fleet. This will involve restarting the Apache service, which will incur a few seconds of downtime.

We are treating this matter with high priority and will continue to monitor the situation closely, providing further updates as remediation progresses.

If you need assistance or have any concerns, please contact our Support team.