CVE-2026-8854 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache

Description

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

Affected products and versions

Product	Affected versions	Fixed in
HTTP Server	9.0	No fix stated
HTTP Server 8.5	8.5.0 → latest	No fix stated

Other CVEs of HTTP Server

The 9 CVEs of HTTP Server →

CVE-2026-9170 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper… 9.8 Critical CVE-2026-8835 IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference 7.3 High CVE-2026-8834 IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability 8.0 High CVE-2026-8855 IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS… 8.1 High