NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#jndirealm

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedapache-tomcat2 ajp1 authentication1 authentication-bypass1 fail-open1 http21 sasl1

2 stories, newest first · one card per story

Cyber Security News21d agohigh

Apache Tomcat patches eight flaws, including a password bypass

Fixes shipped in 11.0.27, 10.1.61 and 9.0.123; three issues are Important and no active exploitation is reported.

3 min readapache-tomcat authentication-bypass

6

oss-security22d agohigh

Tomcat JNDIRealm auth fails open for non-GSSAPI SASL (CVE-2026-101296)

Apache rates the flaw important across Tomcat 7 through 11 ranges when JNDIRealm uses non-GSSAPI SASL.

6 sources apache-tomcat jndirealm

4