CVE-2026-8856CWE-400

IBM HTTP Server is affected by multiple vulnerabilities

High · published May 26, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-05-26T16:56Z
EPSS history
Timeline
  • 26 MAY 16:56Z
    IBM HTTP Server is affected by multiple vulnerabilities
    cvelistv5