Red Hat Security Advisory

RHSA-2026:85926

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images tomcat10-10.1.61-0.1.hum1@noarch@public-hummingbird-aarch64-rpms, tomcat10-10.1.61-0.1.hum1@noarch@public-hummingbird-s390x-rpms, tomcat10-10.1.61-0.1.hum1@noarch@public-hummingbird-x86_64-rpms +28

Fixes 8 records

TI-2026-76845 CVE-2026-103119 · GHSA-64hx-4gc9-f6v4

Buffer under-read in Apache Tomcat can mix response bodies

MEDIUM 46

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading mo…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00586 Published 2026-10-20 Fixed CWE-127

TI-2026-76844 CVE-2026-101356 · GHSA-w9r8-5j45-v8mg

Apache Tomcat HTTP/2 async processing mixes up requests between users

MEDIUM 46

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00499 Published 2026-10-20 Partial fix CWE-362

TI-2026-76843 CVE-2026-101296 · GHSA-5q2g-877c-9cwh

Apache Tomcat JNDIRealm accepts wrong passwords with non-GSSAPI SASL

MEDIUM 42

A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the cor…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00627 Published 2026-10-20 Partial fix CWE-304

TI-2026-76836 CVE-2026-93446 · GHSA-2w6h-6wr9-m5r8

Apache Tomcat incomplete cleanup causes intermittent TLS connection failures

MEDIUM 40

Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00592 Published 2026-10-20 Partial fix CWE-459

TI-2026-76827 CVE-2026-88041 · GHSA-f6r2-3pj4-jmqq

Trailer data leaks between requests in Apache Tomcat HTTP/2

LOW 39

Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00514 Published 2026-10-20 Partial fix CWE-459

TI-2026-76826 CVE-2026-80353 · GHSA-wv4g-r8pf-3wmw

Race condition in Apache Tomcat APR connector exposes Unix sockets

LOW 37

Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-10-20 Partial fix CWE-367

TI-2026-76824 CVE-2026-74048 · GHSA-38jj-69cp-9wgc

Apache Tomcat continues without FIPS mode when FIPS activation fails

LOW 29

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0045 Published 2026-10-20 Partial fix CWE-636

TI-2026-76825 CVE-2026-74049 · GHSA-2hg3-hfj5-cq2f

Execution after redirect in Apache Tomcat JSTL redirect tag

LOW 27

Execution After Redirect (EAR) vulnerability in Apache Tomcat.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2026-10-20 Partial fix CWE-698