CVE-2026-9170

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@us.ibm.com

Published

2026-05-26

Last modified

2026-06-11

Weaknesses

CWE-94

Affected products

• Http Server (Ibm)

References

• https://www.ibm.com/support/pages/node/7274065