CVE-2026-9170
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
Published May 26, 2026 · updated Jul 20, 2026 · ibm http server
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 26, 2026 · NIST NVD
Detected
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
Jul 20, 2026 · NIST NVD
Updated
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
Affected
- cpe ibm/http server8.5.0.0
- cpe ibm/http server9.0.0.0
Sources
- CVE.orgVulnerability recordCVE-2026-9170
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-9170
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
nvd.nist.gov