SB vulnerabilities in Apache Tomcat

Description

Security bypass vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Security vulnerability in HTTP/2 handling can be exploited to bypass security restrictions.
3. Security vulnerability in security constraints can be exploited to bypass security restrictions.

Original advisories

• Fixed in Apache Tomcat 9.0.121

Exploitation

Related products

• Apache-Tomcat

CVE list

• CVE-2026-66299
  high
• CVE-2026-65182
  critical
• CVE-2026-65183
  critical
• CVE-2026-65637
  critical
• CVE-2026-65905
  critical
• CVE-2026-65927
  critical
• CVE-2026-66422
  critical
• CVE-2026-68525
  critical
• CVE-2026-68569
  critical
• CVE-2026-68763
  critical
• CVE-2026-73180
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com