Threats tagged 'bit-tomcat-2026-101356'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.5%	CVE-2026-101356Apache Tomcat · HTTP/2 request/response mix-up after error during async processing Critical9.1EPSS 0.5%2026-10-29GCVE DatabaseCVE-2026-101356 Apache Tomcat contains a vulnerability in HTTP/2 asynchronous servlet processing where incorrect object recycling and reuse can cause request and response mix-ups between users. This affects versions 9.0.118 through 9.0.122, 10.1.55 through 10.1.60, and 11.0.22 through 11.0.26. The issue is fixed in versions 9.0.123, 10.1.61, and 11.0.27. Users should upgrade to these fixed versions to mitigate the risk. EPSS 0.5%Report on CVE-2026-101356 Vulnerability #bit-tomcat-2026-101356 #bitnami	GCVE Database	2026-10-29

Page 1 of 1