Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-8855

IBM HTTP Server is affected by multiple vulnerabilities

Description

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM HTTP Server

  • 8.5.0 to ≤ Interim Fix 002affected
  • 9.0affected

References