IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.8Kritik

CVE-2026-41293Apache Tomcat: HTTP/2 request headers not validated

Apache Software Foundation Apache Tomcat Yayım: (5 ay önce)

Açıklama

Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0-M1 through 10.0.27. Older, end of support versions may also be affected. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

Zayıflık türü (CWE): CWE-20

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Apache Software Foundation Apache Tomcat 11.0.0-M1 – ≤ 11.0.21, 10.1.0-M1 – ≤ 10.1.54, 9.0.0.M1 – ≤ 9.0.117, 10.0.0-M1 – ≤ 10.0.27, 8.5.0 – ≤ 8.5.100
apache tomcat 8.5.0 – ≤ 8.5.100

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (5)
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* ≥ 8.5.0 ≤ 8.5.100
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.118
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* ≥ 10.0.0 ≤ 10.0.27
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* ≥ 10.1.0 < 10.1.55
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* ≥ 11.0.0 < 11.0.22

Aynı üründe son açıklar — Apache Tomcat

9.1Kritik
CVE-2026-103119

Apache Tomcat: AJP response mix-up

Apache Software Foundation Apache Tomcat

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second requ…

7.5Yüksek
CVE-2026-93446

Apache Tomcat: Possible TLS 1.3 connection failures

Apache Software Foundation Apache Tomcat

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122. Users are recommended…

7.5Yüksek
CVE-2026-88041

Apache Tomcat: HTTP/2 trailer header cross-contamination

Apache Software Foundation Apache Tomcat

Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through…