CVE-2026-57941

A use-after-free vulnerability exists in the Apache HTTP Server's mod_http2 due to re-entrancy in the shared session's bbtmp. This flaw could potentially allow an attacker to execute arbitrary code or cause a denial of service, compromising server integrity and availability. Organizations using affected versions of Apache HTTP Server, particularly those utilizing mod_http2, should prioritize patching to mitigate potential exploitation risks.