CVE-2026-9170

CriticalCVSS 9.8

Published: 26/05/2026(UTC)Updated: 11/06/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.07%

20th percentile — higher than 20% of all known CVEs

IBM HTTP Server versions 8.5 and 9.0 are vulnerable to denial of service and potential remote code execution due to improper input validation.

This vulnerability may lead to service outages and allow attackers to execute code remotely, posing a significant security threat to the system.

It is recommended to update the IBM HTTP Server to the latest version to mitigate this vulnerability and implement additional security measures.

Original NVD description (English source)

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.