IBM HTTP Server 8.5/9.0 Buffer Overflow via Auth Admin
CVE-2026-8834 Published on May 26, 2026
IBM HTTP Server is affected by multiple vulnerabilities
IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to execute remote code or cause a denial of service.
Vulnerability Analysis
Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
Weakness Type
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Products Associated with CVE-2026-8834
Want to know whenever a new CVE is published for IBM Http Server? stack.watch will email you.
Affected Versions
IBM HTTP Server:- Version 8.5.0, <= Interim Fix 002 is affected.
- Version 9.0 is affected.