Apache Tomcat Update: 12 Security Flaws Fixed in Tomcat 11.0.26
ID: 841ee6c1-2ef6-5e5e-8eff-5ab5df794458
STIX ID: report--841ee6c1-2ef6-5e5e-8eff-5ab5df794458
Feed Name: The Cyber Express
Threat Score
Apache Tomcat 11.0.26 was released to address 12 security vulnerabilities affecting Tomcat 11.0.0-M1 through 11.0.25, notably a WebSocket message-smuggling flaw (CVE-2026-87022) and an HTTP/2 header mix-up (CVE-2026-86350); fixes cover WebSocket, HTTP/2, AJP, authentication, and TLS certificate validation, with several issues rated Important and remediation requiring upgrading to 11.0.26 and validating artifacts before deployment.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.