Search: CVE-2026-68569

CVE-2026-68569 is an improper authentication vulnerability in Apache Tomcat affecting multiple versions from 7.0.0 through 11.0.24. The flaw allows authentication of users who do not exist in the DataSourceRealm under certain authentication methods such as CLIENT-CERT and SPNEGO. This could lead to unauthorized access. The issue has been fixed in Apache Tomcat versions 11.0.25, 10.1.58, and 9.0.121.