Threats tagged 'ghsa-wrvx-pxxf-g8fg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.4%	CVE-2026-73180Tomcat6 · Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a Medium6.8EPSS 0.4%2026-08-25GCVE DatabaseCVE-2026-73180 Apache Tomcat has an Insufficient Session Expiration vulnerability (CVE-2026-73180) where authenticated WebSocket sessions may persist after the associated HTTP session ends if the session ID changes. This affects multiple versions across Tomcat 7, 8.5, 9, 10.1, and 11 branches. The vulnerability is fixed in versions 11.0.25, 10.1.58, and 9.0.121. Users should upgrade to these or later versions to mitigate the issue. EPSS 0.4%Report on CVE-2026-73180 Vulnerability CWE-613 #ghsa-wrvx-pxxf-g8fg #bit-tomcat-2026-73180	GCVE Database	2026-08-25

Page 1 of 1