{"uuid": "0a43c491-39d5-45fa-ba2d-176d3badc6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu37qzb5tq24", "content": "CVE-2026-65637 - tomcat\nCertain 9.x, 10.x, and 11.x versions of Apache Tomcat have an incomplete fix that can let an attacker bypass the check that confirms the server is talking to the correct website. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tomcat #apache #CVE #infosec", "creation_timestamp": "2026-08-27T16:00:08.511449Z"}