Skip to content
Threat Feed

Product

HTTP Server 8.5

5 briefs RSS
high advisory

CVE-2026-8834: IBM HTTP Server Buffer Overflow Vulnerability

IBM HTTP Server 8.5 and 9.0 are vulnerable to a heap-based buffer overflow, allowing a privileged, authenticated user to execute arbitrary code or cause a denial of service.

HTTP Server 8.5 +1 buffer overflow remote code execution denial of service
2r 3t 1c
medium threat

CVE-2026-8856 - IBM HTTP Server Denial of Service Vulnerability

IBM HTTP Server 8.5 and 9.0 is vulnerable to a denial of service (DoS) in configurations where an attacker possesses write access to server configuration files, as tracked by CVE-2026-8856.

HTTP Server 8.5 +1 cve-2026-8856 dos ibm
2r 1t 1c
high threat

CVE-2026-8855: IBM HTTP Server RCE and DoS via TLS Mutual Authentication

IBM HTTP Server 8.5 and 9.0 are vulnerable to remote code execution and denial of service in configurations utilizing TLS mutual authentication (client authentication).

HTTP Server 8.5 +1 cve rce dos tls ibm
2r 2t 1c
medium advisory

CVE-2026-8854 — IBM HTTP Server mod_mem_cache Denial-of-Service

IBM HTTP Server 8.5 and 9.0 are vulnerable to a denial-of-service (DoS) attack due to a flaw in the optional `mod_mem_cache` module that can be triggered remotely.

HTTP Server 8.5 +1 cve dos denial-of-service
2r 1t 1c
medium advisory

CVE-2026-8835: IBM HTTP Server Invalid Pointer Dereference Vulnerability

IBM HTTP Server versions 8.5 and 9.0 are susceptible to an invalid pointer dereference, potentially allowing a privileged, authenticated user to expose sensitive information or cause a denial of service.

HTTP Server 8.5 +1 cve pointer dereference dos information disclosure
2r 1t 1c