Vulnerabilities
CVE-2026-101296: Flaw in Apache Tomcat Scores 9.1 on CVSS
A newly published critical vulnerability in Apache Tomcat carries a CVSS score of 9.1. Here is what is affected and how to respond.
Apache Tomcat
Everything Threat Times has reported about Apache Tomcat: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Tomcat Fixes Critical CVE-2026-101356 HTTP/2 Data Leakage in 11.0.27, 10.1.61, 9.0.123
A critical vulnerability in Apache Tomcat allows data leakage between users via HTTP/2. Administrators must upgrade to specific patched versions immediately.
Vulnerabilities
Apache Tomcat Patch Fixes Critical AJP Buffer Under-Read Vulnerability
A critical flaw in Apache Tomcat versions through 11.0.26 allows data leakage between requests. Users must upgrade to version 11.0.27 to resolve the issue.