CVE-2026-8854Disclosure(ibm / aix)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch ibm aix systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-825

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aix
  • http_server
  • linux_kernel
  • windows

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-05-26); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Products
aixhttp_serverlinux_kernelwindowsz\/os

1 version affected across 5 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-26: 2Mentions · 2026-05-28: 1Patch / Workaround · 2026-05-28: 1Technical Details · 2026-05-26: 2Technical Details · 2026-05-28: 105-2605-28
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-05-262
Disclosure1General1
2026-05-281
Patch1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-8854 (CVSS 7.5) IBM HTTP Server 8.5 & 9.0 vulnerable to DoS via mod_mem_cache module. Network exploitable, no authentication required. Disable mod_mem_cache if not needed. #CVE #Vulnerability #PatchNow https://t.co/QdV1qgWeFa

    Post summary

    CVE-2026-8854 is a high‑severity DoS vulnerability affecting IBM HTTP Server's mod_mem_cache module; disabling the module is advised as a mitigation.

    0000035
    30 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-8854 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache. https://www.cve.org/CVERecord?id=CVE-2026-8854 ----- Traducción: CVE-2026-8854 IBM HTTP Server 8.5 y 9.0 son vulnerables a denegación de servicio a tr… http://infoflow.cloud`

    Post summary

    Announces CVE-2026-8854, a denial-of-service vulnerability in IBM HTTP Server 8.5/9.0 caused by the mod_mem_cache module.

    0000035
    79 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-8854 IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache. https://www.cve.org/CVERecord?id=CVE-2026-8854

    Post summary

    The snippet simply states that CVE-2026-8854 is a DoS vulnerability in IBM HTTP Server via mod_mem_cache, with no further details on exploitation, mitigation, or PoC.

    00000211
    57.5K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSibmaix---
Appibmhttp_server---
OSibmz\/os---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more