Skip to content
OpenAdvisories
High WID-SEC-2026-1685 9 CVEs

IBM HTTP Server: Mehrere Schwachstellen

Published May 26, 2026 · Updated Jul 22, 2026 · Revision 4 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: HTTP Server Product: Rational ClearQuest Product: Tivoli Monitoring Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM HTTP Server ausnutzen, um beliebigen Programmcode auszuführen und um einen Denial of Service Angriff durchzuführen.

Product

Der IBM HTTP Server ist ein Webserver auf Apache Basis.

Vulnerabilities 9

  • Critical 9.8
    CVE-2026-9170

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.

    IBM HTTP Server
  • High 8.1
    CVE-2026-8855

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

    IBM HTTP Server
  • High 8.0
    CVE-2026-8834

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to execute remote code or cause a denial of service.

    IBM HTTP Server
  • High 7.7
    CVE-2026-8856

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

    IBM HTTP Server
  • High 7.5
    CVE-2026-8850

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload.

    IBM HTTP Server
  • High 7.5
    CVE-2026-8854

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

    IBM HTTP Server
  • High 7.3
    CVE-2026-8835

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.

    IBM HTTP Server
  • Medium 6.2
    CVE-2026-8852

    IBM HTTP Server is affected by multiple vulnerabilities

    IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module.

    IBM HTTP Server
  • Low 2.9
    CVE-2026-45186

    In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service vi…

    libexpat project libexpat insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von IBM aufgenommen

  3. #2

    Neue Updates von IBM aufgenommen

  4. #1

    Initiale Fassung

References