Threats Tagged 'cve-2026-65637'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to tomcat10 and tomcat11 packages. This update addresses multiple vulnerabilities identified by several CVEs including CVE-2026-65182 and others. The advisory provides updated RPM packages with bug fixes and enhancements. A patch is available for affected versions. No active exploits in the wild are reported at this time.

Multiple security vulnerabilities have been identified and fixed in Apache Tomcat as distributed by Red Hat. These include improper input validation, authentication bypass, HTTP/2 header validation issues, information disclosure during WebSocket authentication, improper authorization, case sensitivity handling flaws, and security constraint bypasses. The update addresses these issues in Red Hat Enterprise Linux versions 10.1.0 up to but not including 10.1.49. The vulnerabilities collectively have a moderate security impact.

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) * tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512) * tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293) * tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. (CVE-2026-42498) * tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515) * tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) * tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) * tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) Bug Fix(es) and Enhancement(s): * Tomcat fails to respond to client connections when using Java 8 [rhel-9.8] (JIRA:RHEL-257456) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This security update for Tomcat 11 addresses multiple vulnerabilities including security constraint bypass, TOCTOU issues with Unix Domain Socket permissions, incomplete HTTP/2 SNI validation fixes, replay attacks with DIGEST authentication, access control bypasses, memory exhaustion via WebSocket, role reference bypasses, and denial-of-service via HTTP/2 stream reset. The update also includes fixes for session management, authentication, and configuration parsing errors. These vulnerabilities collectively pose risks of unauthorized access, denial of service, and potential privilege escalation. The update corresponds to Tomcat version 11.0.25.

An improper input validation vulnerability exists in Apache Tomcat due to an incomplete fix for CVE-2026-32990. This affects HTTP/2 no-authority handling, allowing bypass of strict Server Name Indication (SNI) validation. The vulnerability impacts Apache Tomcat versions 9.0.115 through 9.0.120, 10.1.53 through 10.1.57, and 11.0.20 through 11.0.24. Users are advised to upgrade to versions 9.0.121, 10.1.58, or 11.0.25 where the issue is fixed.

CVE-2026-65637 is a critical improper input validation vulnerability in Apache Tomcat. It affects versions 11.0.20 through 11.0.24, 10.1.53 through 10.1.57, and 9.0.115 through 9.0.120. The issue arises from an incomplete fix for a previous vulnerability (CVE-2026-32990). Successful exploitation could lead to full confidentiality, integrity, and availability impact. Users are advised to upgrade to fixed versions 11.0.25, 10.1.58, or 9.0.121.