Cyber Attacks
Apache Tomcat patches eight flaws including authentication bypass in latest release
Apache releases updates for Tomcat 11, 10 and 9 to fix eight vulnerabilities, including an authentication bypass and cross-user data exposure risks.
CVE-2026-101296
Everything Threat Times has reported about CVE-2026-101296: 2 stories, newest first. Part of our Cyber Attacks coverage.
Vulnerabilities
Apache Tomcat releases 11.0.27, 10.1.61, 9.0.123 patch critical JNDI realm auth bypass CVE-2026-101296
Attackers can bypass password checks in Apache Tomcat’s JNDI realm if non-GSSAPI SASL mechanisms are configured, affecting versions up to 11.0.26.