Threats tagged 'ghsa-7895-gffq-w6jq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.3	CVE-2026-55957Org.apache.tomcat.embed:tomcat embed core: Apache Tomcat has a Missing Critical Step in Authentication vulnerability High7.32026-06-29GCVE DatabaseCVE-2026-55957 Apache Tomcat contains a vulnerability in its JNDIRealm authentication when configured to use GSSAPI. This flaw allows attackers to bypass password verification and authenticate without providing the correct credentials. The issue affects multiple versions across the 7.x, 8.5.x, 9.x, 10.1.x, and 11.x branches. Fixed versions have been released in 11.0.5, 10.1.37, and 9.0.101. Report on CVE-2026-55957 Vulnerability CWE-304 #ghsa-7895-gffq-w6jq #maven	GCVE Database	2026-06-29

Page 1 of 1