SB vulnerabilities in Apache Tomcat

Description

Security bypass vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Security vulnerability in RewriteValve may allow security control bypass can be exploited to bypass security restrictions.

Original advisories

• Fixed in Apache Tomcat 9.0.120

Exploitation

CVE list

• CVE-2026-59083
  unknown
• CVE-2026-59084
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com