Threat Intelligence Database

IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache.

IBM HTTP Server versions 8.5.0 and 9.0 contain a vulnerability classified as CWE-400 (Uncontrolled Resource Consumption) that can lead to denial of service. This issue arises in configurations where an attacker has write access to parts of the server configuration, potentially allowing them to exhaust server resources. The vulnerability has a high severity rating with a CVSS score of 7.7. No official patch or remediation guidance is currently provided by IBM, and no known exploits are reported in the wild.

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload.

A vulnerability in AdonisJS HTTP Server prior to versions 7.8.1 and 8.2.0 allows an attacker to exploit the response.redirect(). back() method. This method improperly trusts the Referer header from incoming requests and redirects users to that URL without validating the host. An attacker who can control the Referer header can redirect users to malicious external sites. This open redirect issue affects all AdonisJS applications using this method in the specified vulnerable versions.

C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via the RequestHandler::handleRequest method. This flaw allows an unauthenticated, remote attacker to read arbitrary files from the server's filesystem by crafting a malicious HTTP GET request containing ../ sequences. The application fails to sanitize the filename variable derived from the user-controlled URL path, directly concatenating it to the files_directory base path and enabling traversal outside the intended root. No patch was available at the time of publication.

HighVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2026-24469#cwe-22