Skip to content

Known vulnerabilities in IBM HTTP Server

Is your version affected?

CVE Summary Score Published
CVE-2026-9170 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper… 9.8 Critical May 26, 2026
CVE-2026-8835 IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference 7.3 High May 26, 2026
CVE-2026-8834 IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability 8.0 High May 26, 2026
CVE-2026-8855 IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS… 8.1 High May 26, 2026
CVE-2026-8854 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache 7.5 High May 26, 2026
CVE-2026-8856 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access… 7.7 High May 26, 2026
CVE-2026-8852 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module 6.2 Medium May 26, 2026
CVE-2026-8850 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload 7.5 High May 26, 2026
CVE-2023-26281 IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service… 5.9 Medium Feb 28, 2023

Other IBM products