Search: CVE-2026-43515

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 1.2%	CVE-2026-43515Apache Tomcat · Improper Authorization Critical9.1EPSS 1.2%2026-05-12CVE Database V5CVE-2026-43515 Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue. EPSS 1.2%Vulnerability Apache Software Foundation CWE-285	CVE Database V5	2026-05-12

Page 1 of 1 · 1 duplicate CVE record merged