[Apache Fixes Critical Vulnerability Discovered by Anthropic Scanning Tool] According to a report by The Defiant on November 14th, Apache has patched a critical vulnerability in its HTTP Server that could have allowed unauthenticated attackers to remotely execute code on the server. Apache credited the discovery of the vulnerability to Anthropic's AI tool, OSS Scanner, and two Google Cloud researchers. The vulnerability, identified as CVE-2026-119618, affected Apache HTTP Server versions 2.4.55 through 2.4.70; servers loading the mod_http2 module and enabling HTTP/2 were at risk. The vulnerability was patched in Apache version 2.4.71, released on November 11th.