CVE-2023-26281

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/248296 · VDB Entry
• ibm.com/support/pages/node/6958522 · Patch

More vulnerabilities in http server

• CVE-2026-9170CRITICAL 9.8IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
• CVE-2026-8856CRITICAL 9.1IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server …
• CVE-2026-8855CRITICAL 9.8IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (…
• CVE-2026-8854HIGH 7.5IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.
• CVE-2026-8835HIGH 7.3IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, co…