Cyber Attacks
Apache Tomcat patches eight flaws including authentication bypass in latest release
Apache releases updates for Tomcat 11, 10 and 9 to fix eight vulnerabilities, including an authentication bypass and cross-user data exposure risks.
CVE-2026-101356
Everything Threat Times has reported about CVE-2026-101356: 2 stories, newest first. Part of our Cyber Attacks coverage.
Vulnerabilities
Apache Tomcat Fixes Critical CVE-2026-101356 HTTP/2 Data Leakage in 11.0.27, 10.1.61, 9.0.123
A critical vulnerability in Apache Tomcat allows data leakage between users via HTTP/2. Administrators must upgrade to specific patched versions immediately.