Denial of service via mod_fastcgi in IBM HTTP Server (CVE-2026-8852)

IBM HTTP Server 8.5 and 9.0 is vulnerable to denial of service through the optional mod_fastcgi module due to a reachable assertion (CWE-617). Exploitation of this vulnerability can result in loss of availability of the affected server. Affected versions: - IBM HTTP Server 8.5 - IBM HTTP Server 9.0 We recommend updating to: Fix Pack 9.0.5.29 or later, Fix Pack 8.5.5.30 or later. CVSS 7.5 · our assessment: this_week Reference: https://www.ibm.com/support/pages/node/7274065 Details: https://vuln.today/cve/CVE-2026-8852