Threats tagged 'bit-tomcat-2026-101296'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.6%	CVE-2026-101296Apache Tomcat · JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms Critical9.1EPSS 0.6%2026-10-29GCVE DatabaseCVE-2026-101296 Apache Tomcat contains an authentication vulnerability in the JNDIRealm when configured with non-GSSAPI SASL mechanisms. This flaw allows attackers to bypass password validation and authenticate without correct credentials. The issue affects multiple versions across Tomcat 7, 8.5, 9, 10.1, and 11 branches. Fixed versions are 11.0.27, 10.1.61, and 9.0.123. EPSS 0.6%Report on CVE-2026-101296 Vulnerability #bit-tomcat-2026-101296 #bitnami	GCVE Database	2026-10-29

Page 1 of 1