CVE-2026-8856
IBM HTTP Server is affected by multiple vulnerabilities
- State
- Published
- Severity
- 7.7 High
- Published
- May 26, 2026
- Updated
- May 27, 2026
- Reserved
- May 18, 2026
Description
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | ibm |
Weaknesses
- CWE-400 Uncontrolled Resource Consumption
Affected Products
| Product | Versions |
|---|---|
HTTP ServerIBM |
|
References
- https://www.ibm.com/support/pages/node/7274065vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.