Description

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

Remediation

References

CVE-2026-8855

Related Vulnerabilities

WordPress Plugin Venture Event Manager Cross-Site Scripting (3.2.4)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-8450)

WordPress Plugin Twenty20 Image Before-After Malicious Code (1.6.3)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2687)

Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9268)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-94 CVE-2026-8855