8.1
High
CVE-2026-8855 IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS…
Description
IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HTTP Server | 9.0 | No fix stated |
| HTTP Server 8.5 | 8.5.0 → latest | No fix stated |
Other CVEs of HTTP Server
The 9 CVEs of HTTP Server →
CVE-2026-9170
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper…
9.8
Critical
CVE-2026-8835
IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference
7.3
High
CVE-2026-8834
IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability
8.0
High
CVE-2026-8854
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache
7.5
High