A security vulnerability has been discovered in the Apache HTTP Server (Apache2): CVE-2026-119618. Apache2 is third-party software used by FileCap on-prem. The vulnerability is therefore not in FileCap itself, but your FileCap on-prem server is vulnerable as long as Apache2 has not been updated. The vulnerability has been fixed in Apache 2.4.71 (Debian).
For more technical details about the vulnerability, see the NVD entry for CVE-2026-119618.
What does this mean for you?
Are you using FileCap on-premises? If so, whether you need to take any action depends on your settings. FileCap itself does not need to be modified.
Automatic security updates are enabled: you don't need to do anything. If you want to be sure, check the Apache2 version as described below.
Automatic security updates are turned off: enable them by selecting option 6, "Security update settings, " in the FileCap Console Menu. If you do not do this, check which version of Apache2 you are running and update Apache2 if necessary.
Check the Apache2 version
- Log in to the FileCap server via SSH and select option 8, "Admin prompt," from the FileCap Console Menu.
- Type after the prompt (
#) the commandapache2 -vout. - Compare the output with the minimum version listed below. If your version is the same or newer, you're protected. If your version is older, update Apache2.
Minimum version:
Server version: Apache/2.4.71 (Debian)
Update Apache2
- Log in to the FileCap server via SSH and select option 8, "Admin prompt," from the FileCap Console Menu.
- Enter the command
App updateout. - Then enter the command
apt upgradeand secure with Y if requested to do so. - After the update, check the version again using
apache2 -v. Are you running Apache/2.4.71 (Debian) or newer? If so, the server is protected.
Frequently Asked Questions
What is CVE-2026-119618?
CVE-2026-119618 is a security vulnerability in the Apache HTTP Server (Apache2). The vulnerability has been fixed in Apache 2.4.71 (Debian).
Is FileCap vulnerable to CVE-2026-119618?
The vulnerability is not in FileCap itself, but in Apache2, third-party software used by FileCap on-prem. However, your FileCap on-prem server remains vulnerable as long as it is running a version of Apache2 older than 2.4.71 (Debian). Updating Apache2 will resolve the vulnerability.
As a FileCap on-premises administrator, do I need to do anything?
If automatic security updates are enabled, you don't need to do anything. If they are disabled, enable them using option 6 in the FileCap Console Menu, or check using option 8 with apache2 -v which version you're running. If it's older than Apache 2.4.71 (Debian), update Apache2 with App update and apt upgrade.
Questions?
Do you have questions about this security update or need help with the update? Please contact us at sales@filecap.com.
