CVE-2026-8835: IBM HTTP Server

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.

Affected products

• IBM HTTP Server: from 8.5.0.0, before 8.5.5.30 (fixed in 8.5.5.30); from 9.0.0.0, before 9.0.5.29 (fixed in 9.0.5.29)

Published 2026-05-26. Last modified 2026-07-23.