https://vulnerability.circl.lu/product/83be5b68-8475-4ad9-8134-9fa499e23eea/recent 2026-09-14T09:10:20.094790+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Vulnerabilities published under the CPE names of Tomcat. https://vulnerability.circl.lu/vuln/cve-2026-66422 2026-08-26T18:52:26.487000+00:00 Apache Tomcat: Servlet role references can bypass declarative role constraints

Apache Tomcat: Servlet role references can bypass declarative role constraints

2026-08-25T21:55:16.928000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-68525 2026-08-26T18:40:55.312000+00:00 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints

Apache Tomcat: Redirect after FORM auth may bypass method specific constraints

2026-08-25T21:57:18.557000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-68569 2026-08-26T18:38:54.931000+00:00 Apache Tomcat: Principal lookup can fail open in some cases

Apache Tomcat: Principal lookup can fail open in some cases

2026-08-25T21:59:17.438000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-68763 2026-08-26T18:36:43.341000+00:00 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset

2026-08-25T22:00:37.047000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-73180 2026-08-26T18:35:13.414000+00:00 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

2026-08-25T22:01:58+00:00 https://vulnerability.circl.lu/vuln/cve-2026-65927 2026-08-26T15:22:01.843000+00:00 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

2026-08-25T21:53:05.852000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-65905 2026-08-26T15:21:11.604000+00:00 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Apache Tomcat: Limited replay attack possible with DIGEST authentication

2026-08-25T21:51:33.307000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-65637 2026-08-26T15:20:30.366000+00:00 Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete

Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete

2026-08-25T21:49:13.127000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-65183 2026-08-26T15:19:19.234000+00:00 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

2026-08-25T21:44:49.363000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-65182 2026-08-26T15:18:16.813000+00:00 Apache Tomcat: Bypass longest prefix security constraint

Apache Tomcat: Bypass longest prefix security constraint

2026-08-25T21:43:37.040000+00:00