CVE-2026-119618 is a recently discovered flaw in the Apache mod_http2 module.
Opalstack's managed Apache service does not use mod_http2 and is unaffected by this CVE.
Customers who run our managed Apache software as a private stack or who have built their own Apache httpd from source are advised to review their configuration and either disable mod_http2 or upgrade their httpd installation to the latest version as applicable.
