Apache Tomcat AJP under-read can mix responses (CVE-2026-103119)
Tomcat 11.0.0-M25 through 11.0.26 can send part of one response body to the next request on the same connection.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
Tomcat 11.0.0-M25 through 11.0.26 can send part of one response body to the next request on the same connection.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views