EXPOSURES › CVE-2026-8855

CVE-2026-8855

HIGH

DETAIL

SourceNVD · cve Published2026-05-26 CVSS8.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-8855 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

IBM · vendor Microsoft · vendor linux · vendor HTTP Server · product aix · product linux kernel · product windows · product z\/os · product

DESCRIPTION

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication).

AFFECTED FEDRAMP PRODUCTS · 9

PRODUCT	PROVIDER	STATUS	MATCH
Azure Commercial Cloud Microsoft	Microsoft	Authorized	vendor-exact · 0.90
Azure Government (includes Dynamics 365) Microsoft	Microsoft	Authorized	vendor-exact · 0.90
IBM Cloud for Government IBM	IBM	Authorized	vendor-exact · 0.90
IBM Federal HR Cloud IBM	IBM	Authorized	vendor-exact · 0.90
IBM Maximo and TRIRIGA on Cloud for U.S. Federal IBM	IBM	Authorized	vendor-exact · 0.90
MaaS360 Enterprise Mobility Management IBM	IBM	Authorized	vendor-exact · 0.90
Microsoft Office 365 GCC High Microsoft	Microsoft	In Process	vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services Microsoft	Microsoft	Authorized	vendor-exact · 0.90
SmartCloud for Government IBM	IBM	Authorized	vendor-exact · 0.90