Paper/Archive/CVE-2026-8856

CVE-2026-8856

IBM HTTP Server — IBM HTTP Server is affected by multiple vulnerabilities

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 9.4.094 × 201.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

Affected

ProductAffectedFixed inSource

HTTP Server8.5.0 – Interim Fix 002–CNA

HTTP Server9.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

ibm (CNA)7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

patchibm.com/support/pages/node/7274065