Search: CVE-2026-42498

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.6%	CVE-2026-42498Apache Tomcat · Exposure of HTTP Authentication Header to unexpected hosts High7.3EPSS 0.6%2026-05-12CVE Database V5CVE-2026-42498 CVE-2026-42498 is a vulnerability in Apache Tomcat that causes the HTTP Authentication Header to be exposed to unexpected hosts during WebSocket authentication. This affects multiple versions of Apache Tomcat ranging from 7.0.83 through 11.0.21. The issue can lead to unauthorized disclosure of authentication information. Apache has released fixed versions 11.0.22, 10. EPSS 0.6%Vulnerability Apache Software Foundation CWE-200	CVE Database V5	2026-05-12

Page 1 of 1 · 2 duplicate CVE records merged