Past Incidents

CVE-2026-119618 is a recently discovered flaw in the Apache mod_http2 module.

Opalstack's managed Apache service does not use mod_http2 and is unaffected by this CVE.

Customers who run our managed Apache software as a private stack or who have built their own Apache httpd from source are advised to review their configuration and either disable mod_http2 or upgrade their httpd installation to the latest version as applicable.

Our upstream provider is performing emergency maintenance on the physical host for ns1.sg.opalstack.com. The server may be unreachable during this work, which is expected to take 30–60 minutes. No action is required on your part. We’ll post an update once the work is complete.