agentprime: apache-software-foundation-apache-tomcatEvery new CVE for apache-software-foundation-apache-tomcat.https://agentprime.io/CVE-2026-103119: Apache Tomcat: AJP response mix-uphttps://agentprime.io/advisories/CVE-2026-103119/https://agentprime.io/advisories/CVE-2026-103119/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:54:13 GMTCVEcriticalCVE-2026-101356: Apache Tomcat: HTTP/2 request/response mix-up after error during async processinghttps://agentprime.io/advisories/CVE-2026-101356/https://agentprime.io/advisories/CVE-2026-101356/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:46:50 GMTCVEcriticalCVE-2026-101296: Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismshttps://agentprime.io/advisories/CVE-2026-101296/https://agentprime.io/advisories/CVE-2026-101296/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:45:39 GMTCVEcriticalCVE-2026-93446: Apache Tomcat: Possible TLS 1.3 connection failureshttps://agentprime.io/advisories/CVE-2026-93446/https://agentprime.io/advisories/CVE-2026-93446/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:44:35 GMTCVECVE-2026-88041: Apache Tomcat: HTTP/2 trailer header cross-contaminationhttps://agentprime.io/advisories/CVE-2026-88041/https://agentprime.io/advisories/CVE-2026-88041/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:43:28 GMTCVECVE-2026-80353: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connectorhttps://agentprime.io/advisories/CVE-2026-80353/https://agentprime.io/advisories/CVE-2026-80353/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:42:05 GMTCVECVE-2026-74049: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)https://agentprime.io/advisories/CVE-2026-74049/https://agentprime.io/advisories/CVE-2026-74049/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:37:43 GMTCVECVE-2026-74048: Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-uphttps://agentprime.io/advisories/CVE-2026-74048/https://agentprime.io/advisories/CVE-2026-74048/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 13:36:36 GMTCVECVE-2026-87022: Apache Tomcat: WebSocket message smuggling with per-message-deflatehttps://agentprime.io/advisories/CVE-2026-87022/https://agentprime.io/advisories/CVE-2026-87022/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:32:55 GMTCVECVE-2026-86350: Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-uphttps://agentprime.io/advisories/CVE-2026-86350/https://agentprime.io/advisories/CVE-2026-86350/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:31:36 GMTCVEcriticalCVE-2026-86248: Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledhttps://agentprime.io/advisories/CVE-2026-86248/https://agentprime.io/advisories/CVE-2026-86248/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:29:35 GMTCVEcriticalCVE-2026-79677: Apache Tomcat: WebSocket DoS due to lost asynchronous write timeouthttps://agentprime.io/advisories/CVE-2026-79677/https://agentprime.io/advisories/CVE-2026-79677/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:28:03 GMTCVECVE-2026-78437: Apache Tomcat: HTTP/2 DoS via malformed requesthttps://agentprime.io/advisories/CVE-2026-78437/https://agentprime.io/advisories/CVE-2026-78437/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:26:29 GMTCVECVE-2026-78383: Apache Tomcat: AJP DoS via missing request bodyhttps://agentprime.io/advisories/CVE-2026-78383/https://agentprime.io/advisories/CVE-2026-78383/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:23:15 GMTCVECVE-2026-77791: Apache Tomcat: DoS via busy wait during WebSocket closehttps://agentprime.io/advisories/CVE-2026-77791/https://agentprime.io/advisories/CVE-2026-77791/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:20:50 GMTCVECVE-2026-77762: Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Requesthttps://agentprime.io/advisories/CVE-2026-77762/https://agentprime.io/advisories/CVE-2026-77762/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:19:28 GMTCVECVE-2026-77756: Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requestshttps://agentprime.io/advisories/CVE-2026-77756/https://agentprime.io/advisories/CVE-2026-77756/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:18:02 GMTCVECVE-2026-76183: Apache Tomcat: Bypass of security constraints for WebSocket endpointshttps://agentprime.io/advisories/CVE-2026-76183/https://agentprime.io/advisories/CVE-2026-76183/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:16:09 GMTCVEcriticalCVE-2026-75973: Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configuredhttps://agentprime.io/advisories/CVE-2026-75973/https://agentprime.io/advisories/CVE-2026-75973/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:14:07 GMTCVECVE-2026-73581: Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystorehttps://agentprime.io/advisories/CVE-2026-73581/https://agentprime.io/advisories/CVE-2026-73581/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 11:08:53 GMTCVECVE-2026-73180: Apache Tomcat: Authenticated WebSocket session survives end of HTTP sessionhttps://agentprime.io/advisories/CVE-2026-73180/https://agentprime.io/advisories/CVE-2026-73180/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 22:01:58 GMTCVECVE-2026-68763: Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is resethttps://agentprime.io/advisories/CVE-2026-68763/https://agentprime.io/advisories/CVE-2026-68763/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 22:00:37 GMTCVECVE-2026-68569: Apache Tomcat: Principal lookup can fail open in some caseshttps://agentprime.io/advisories/CVE-2026-68569/https://agentprime.io/advisories/CVE-2026-68569/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 21:59:17 GMTCVECVE-2026-66422: Apache Tomcat: Servlet role references can bypass declarative role constraintshttps://agentprime.io/advisories/CVE-2026-66422/https://agentprime.io/advisories/CVE-2026-66422/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 21:55:16 GMTCVECVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access controlhttps://agentprime.io/advisories/CVE-2026-65927/https://agentprime.io/advisories/CVE-2026-65927/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 21:53:05 GMTCVECVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Socketshttps://agentprime.io/advisories/CVE-2026-65183/https://agentprime.io/advisories/CVE-2026-65183/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 21:44:49 GMTCVECVE-2026-66299: Apache Tomcat: DoS via WebSocket chat examplehttps://agentprime.io/advisories/CVE-2026-66299/https://agentprime.io/advisories/CVE-2026-66299/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 14:29:05 GMTCVECVE-2026-59084: Apache Tomcat: EncryptInterceptor requirements not clearly documentedhttps://agentprime.io/advisories/CVE-2026-59084/https://agentprime.io/advisories/CVE-2026-59084/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 08:24:21 GMTCVEcriticalCVE-2026-59083: Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypasshttps://agentprime.io/advisories/CVE-2026-59083/https://agentprime.io/advisories/CVE-2026-59083/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 08:13:04 GMTCVEcritical