Description
IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | HTTP Server | 8.5.0 – ≤ Interim Fix 002, 9.0 | — |
Advisories 1
- WID-SEC-2026-1685 IBM HTTP Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 22, 2026
References
- https://www.ibm.com/support/pages/node/7274065 vendor-advisory patch