← Back

CVE-2026-8856

nvd nist
Published: May 26, 2026Modified: Jul 23, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

Affected (2)

Products: Ibm: Http Server
Ibm
1 product
Http Server
Configuration A
2 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Ibm
Http Server
From 8.5.0.0 to 8.5.5.30
Http Server
From 9.0.0.0 to 9.0.5.29
Running on/withPlatform Versions
Ibm
Aix
All versions
Ibm
Z/os
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.