CVE-2026-8850

Summary

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload.

Affected Software

VendorProductVersion RangeStatus
IBMHTTP Server8.5.0 <= Interim Fix 002affected
IBMHTTP Server9.0affected

Weaknesses

  • CWE-476: CWE-476 NULL Pointer Dereference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References