Description
IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | HTTP Server | 8.5.0 – ≤ Interim Fix 002, 9.0 | — |
Advisories 1
- WID-SEC-2026-1685 IBM HTTP Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 22, 2026
References
- https://www.ibm.com/support/pages/node/7274065 vendor-advisory patch