Invalid Pointer Dereference in IBM HTTP Server 8.5 and 9.0

CVE-2026-8835

What is CVE-2026-8835?

IBM HTTP Server versions 8.5 and 9.0 contain a vulnerability that allows a privileged user, authenticated to the Administration Server, to exploit an invalid pointer dereference. This can lead to the exposure of sensitive information or result in a denial of service, posing a significant risk to the integrity and availability of the server. It is crucial for organizations using these versions to apply relevant patches and mitigate the potential impacts.

References