https://vulnerability.circl.lu Vulnerabilities published under the CPE names of Tomcat. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 09:10:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints Apache Tomcat: Servlet role references can bypass declarative role constraints https://vulnerability.circl.lu/vuln/cve-2026-66422 Tue, 25 Aug 2026 21:55:16 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68525 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints Apache Tomcat: Redirect after FORM auth may bypass method specific constraints https://vulnerability.circl.lu/vuln/cve-2026-68525 Tue, 25 Aug 2026 21:57:18 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases Apache Tomcat: Principal lookup can fail open in some cases https://vulnerability.circl.lu/vuln/cve-2026-68569 Tue, 25 Aug 2026 21:59:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset https://vulnerability.circl.lu/vuln/cve-2026-68763 Tue, 25 Aug 2026 22:00:37 +0000 https://vulnerability.circl.lu/vuln/cve-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session Apache Tomcat: Authenticated WebSocket session survives end of HTTP session https://vulnerability.circl.lu/vuln/cve-2026-73180 Tue, 25 Aug 2026 22:01:58 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control https://vulnerability.circl.lu/vuln/cve-2026-65927 Tue, 25 Aug 2026 21:53:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication Apache Tomcat: Limited replay attack possible with DIGEST authentication https://vulnerability.circl.lu/vuln/cve-2026-65905 Tue, 25 Aug 2026 21:51:33 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65637 Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete https://vulnerability.circl.lu/vuln/cve-2026-65637 Tue, 25 Aug 2026 21:49:13 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets https://vulnerability.circl.lu/vuln/cve-2026-65183 Tue, 25 Aug 2026 21:44:49 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65182 Apache Tomcat: Bypass longest prefix security constraint Apache Tomcat: Bypass longest prefix security constraint https://vulnerability.circl.lu/vuln/cve-2026-65182 Tue, 25 Aug 2026 21:43:37 +0000