EXPOSURES › CVE-2026-8856

CVE-2026-8856

HIGH

DETAIL

SourceNVD · cve Published2026-05-26 CVSS7.7 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-8856 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

IBM · vendor Microsoft · vendor linux · vendor HTTP Server · product aix · product linux kernel · product windows · product z\/os · product

DESCRIPTION

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration.

AFFECTED FEDRAMP PRODUCTS · 9

PRODUCT	PROVIDER	STATUS	MATCH
Azure Commercial Cloud Microsoft	Microsoft	Authorized	vendor-exact · 0.90
Azure Government (includes Dynamics 365) Microsoft	Microsoft	Authorized	vendor-exact · 0.90
IBM Cloud for Government IBM	IBM	Authorized	vendor-exact · 0.90
IBM Federal HR Cloud IBM	IBM	Authorized	vendor-exact · 0.90
IBM Maximo and TRIRIGA on Cloud for U.S. Federal IBM	IBM	Authorized	vendor-exact · 0.90
MaaS360 Enterprise Mobility Management IBM	IBM	Authorized	vendor-exact · 0.90
Microsoft Office 365 GCC High Microsoft	Microsoft	In Process	vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services Microsoft	Microsoft	Authorized	vendor-exact · 0.90
SmartCloud for Government IBM	IBM	Authorized	vendor-exact · 0.90