VULNERABILITY INTELLIGENCE

CVE-2026-9170

CVSS score7.5 HIGH
EPSS probability0.49%
CISA KEVNot currently listed
Published2026-05-26
Last modified2026-07-20
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N

Description

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references