CVE-2026-9170

CriticalCVSS 9.8

Published: 26/05/2026(UTC)Updated: 20/07/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

39th percentile - higher than 39% of all known CVEs

Summary

IBM HTTP Server versions 8.5 and 9.0 are vulnerable to denial of service and potential remote code execution due to improper input validation.

Risk Assessment

An attacker could exploit this vulnerability to cause server unavailability or gain control over the server, posing a serious threat to business continuity and data security.

Recommendation

Apply the latest security updates provided by IBM for the HTTP Server immediately and implement additional input validation mechanisms.

Original NVD description (English source)

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.