9.8
Critical
CVE-2026-9170 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper…
Description
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty | Versions not published | |
| HTTP Server | 9.0 | No fix stated |
| HTTP Server | 8.5 | No fix stated |