TI-2026-46945 CVE-2026-65905 · GHSA-9xv2-5v5q-p794
Apache Tomcat: Limited replay attack possible with DIGEST authentication
Priority MEDIUM 50
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator.
RHSA-2026:92863
tomcat security, bug fix, and enhancement update
Released 2026-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) tomcat-1:10.1.49-2.el10_0, tomcat-admin-webapps-1:10.1.49-2.el10_0, tomcat-docs-webapp-1:10.1.49-2.el10_0 +5
Fixes 6 records
TI-2026-48288 CVE-2026-68525 · GHSA-h3x4-894j-xpx5
Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
Priority MEDIUM 48
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET.
TI-2026-46514 CVE-2026-65182 · GHSA-gcx9-497g-6cp6
Apache Tomcat: Bypass longest prefix security constraint
Priority MEDIUM 48
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-pa…
TI-2026-48346 CVE-2026-68763 · GHSA-82jr-6mfr-9vq5
Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset
Priority MEDIUM 40
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-…
TI-2026-46965 CVE-2026-65927 · GHSA-g8qj-vp23-742m
Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
Priority MEDIUM 40
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule.
TI-2026-48316 CVE-2026-68569 · GHSA-5q6q-ffrq-6xfc
Apache Tomcat: Principal lookup can fail open in some cases
Priority LOW 38
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g.