Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tomcat6

tomcat7

tomcat8

tomcat9

tomcat10

tomcat11

CVE-2026-53404 is a vulnerability in Apache Tomcat's RewriteValve component where incorrect control flow causes subsequent non-OR conditions in an OR chain to be skipped if the first condition matches. This flaw affects multiple Apache Tomcat versions across major branches 8.5, 9.0, 10.1, and 11.0. The issue can lead to bypassing rewrite rules, potentially resulting in unauthorized access. Official patches are available in Apache Tomcat versions 11.0.23, 10.1.56, and 9.0.119. Both Ubuntu and Red Hat have released advisories confirming the vulnerability and providing fixed package versions. No known exploits in the wild have been reported to date.

Apache Tomcat contains a control flow vulnerability (CVE-2026-53404) in the RewriteValve component. The flaw causes the rewrite valve to incorrectly skip evaluation of subsequent non-OR conditions in an OR chain if the first condition matches, leading to unexpected rule processing. This can allow an attacker to bypass rewrite rules and gain unauthorized access under certain configurations. The vulnerability affects Apache Tomcat versions from 8.5.0 through 8.5.100, 9.0.0 through 9.0.118, 10.1.0 through 10.1.55, and 11.0.0 through 11.0.22. Vendor advisories from Ubuntu and Red Hat confirm the issue and provide fixed versions. Users are advised to upgrade to Apache Tomcat 11.0.23, 10.1.56, or 9.0.119 or apply vendor patches accordingly.

Detailed information about UBUNTU-CVE-2026-53404 affecting null tomcat6. Get real-time updates, technical details, and mitigation strategies.

UBUNTU-CVE-2026-53404 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:49951

https://access.redhat.com/security/updates/classification/#moderate

https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/7.0/html/red_hat_jboss_web_server_7.0_service_pack_1_release_notes/index

2494668

2494675

2494681

2499917

Canonical URL

https://access.redhat.com/errata/RHSA-2026:49952

Apache Tomcat: Bad ornext processing in RewriteValve (CVE-2026-53404)

Threats Tagged 'ubuntu-cve-2026-53404'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-53404'

Lead Pen Test Professional