7.3
High
CVE-2026-8835 IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference
Description
IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HTTP Server | 9.0 | No fix stated |
| HTTP Server 8.5 | 8.5.0 → latest | No fix stated |
Other CVEs of HTTP Server
The 9 CVEs of HTTP Server →
CVE-2026-9170
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper…
9.8
Critical
CVE-2026-8834
IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability
8.0
High
CVE-2026-8855
IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS…
8.1
High
CVE-2026-8854
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache
7.5
High