Tomcat

Mentions · 7d0
Mentions · 30d4
All mentions4
First seenOct 15, 2026
Last mentioned9d ago

Timeline

4 articles · newest first

Apache Tomcat flaws allow auth bypass and data exposure

Eight issues span three branches; Important fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, with no exploitation stated.

GBHackersOct 21, 09:05 UTC · 9d agoVulnerabilityCVE-2026-101296 CVE-2026-103119 CVE-2026-101356+54 · 3 reads

Apache Tomcat patches eight flaws, including a password bypass

Fixes shipped in 11.0.27, 10.1.61 and 9.0.123; three issues are Important and no active exploitation is reported.

Cyber Security NewsOct 21, 08:28 UTC · 9d agoVulnerabilityCVE-2026-101296 CVE-2026-101356 CVE-2026-103119+53 · 1 read

Apache Tomcat AJP under-read can mix responses (CVE-2026-103119)

Tomcat 11.0.0-M25 through 11.0.26 can send part of one response body to the next request on the same connection.

oss-securityOct 20, 17:32 UTC · 10d agoVulnerability 2 sourcesCVE-2026-1031191 · 1 read

[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)

Authenticated Syncrify 6.2 path traversal can write cron jobs and execute commands as root.

Full DisclosureOct 15, 07:42 UTC · 15d agoVulnerability4

Related CVEs

by mentions

CVE-2026-1031199.1
Buffer under-read mixes Tomcat 11 responses on reused connections
published 10d agoApache Tomcat
CVE-2026-1013569.1
HTTP/2 request/response mix-up in Apache Tomcat async servlets
published 10d agoApache Tomcat
CVE-2026-1012969.1
Auth bypass in Apache Tomcat JNDIRealm with non-GSSAPI SASL
published 10d agoApache Tomcat
CVE-2026-803538.1
Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an…
published 10d ago
CVE-2026-934467.5
Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently
published 10d ago
CVE-2026-880417.5
Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request
published 10d ago
CVE-2026-740486.5
Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat
published 10d ago
CVE-2026-740496.1
Execution After Redirect (EAR) vulnerability in Apache Tomcat
published 10d ago

Appears with

Apachevendor · 3
Synametrics Technologiesvendor · 1
Syncrifyproduct · 1

Entities are extracted by the model from each article. First seen Oct 15, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.