TI-2026-48316 CVE-2026-68569 · GHSA-5q6q-ffrq-6xfc
Apache Tomcat: Principal lookup can fail open in some cases
Priority LOW 38
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g.
Vulnerabilities
4 records
TI-2026-48288 CVE-2026-68525 · GHSA-h3x4-894j-xpx5
Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
Priority MEDIUM 48
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET.
TI-2026-46965 CVE-2026-65927 · GHSA-g8qj-vp23-742m
Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
Priority MEDIUM 40
Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule.
TI-2026-46514 CVE-2026-65182 · GHSA-gcx9-497g-6cp6
Apache Tomcat: Bypass longest prefix security constraint
Priority MEDIUM 48
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-pa…