Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Advisory: IBM HTTP Server — ibm.com/support/pages/node/7274065 Clear all filters
TI-2026-08061 CVE-2026-9170 · GHSA-q578-5vf7-89mr

IBM HTTP Server is affected by multiple vulnerabilities

Priority MEDIUM 49

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00488 Published 2026-05-26 No fix listed CWE-94
TI-2026-07778 CVE-2026-8855 · GHSA-rjqm-vgmr-8cp8

IBM HTTP Server is affected by multiple vulnerabilities

Priority MEDIUM 43

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00456 Published 2026-05-26 No fix listed CWE-94
TI-2026-07777 CVE-2026-8854 · GHSA-2h2g-6j29-j4fm

IBM HTTP Server is affected by multiple vulnerabilities

Priority LOW 39

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00359 Published 2026-05-26 No fix listed CWE-825
TI-2026-07779 CVE-2026-8856 · GHSA-48g8-mw8p-w6j7

IBM HTTP Server is affected by multiple vulnerabilities

Priority LOW 39

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00197 Published 2026-05-26 No fix listed CWE-400
TI-2026-07775 CVE-2026-8852 · GHSA-5grx-55jc-2fff

IBM HTTP Server is affected by multiple vulnerabilities

Priority LOW 32

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00197 Published 2026-05-26 No fix listed CWE-617
TI-2026-07773 CVE-2026-8850 · GHSA-f24c-2c3h-f7jx

IBM HTTP Server is affected by multiple vulnerabilities

Priority LOW 39

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0038 Published 2026-05-26 No fix listed CWE-476