CVE-2026-103119

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M25 through 11.0.26

Description A buffer under-read occurs in the HTTP/1.1 non-blocking write path. This issue allows a large response body to be split between the current request and the subsequent request received on the same keep-alive connection. This typically results in the failure of the second request and may lead to the leakage of data from the first response into the second.

Recommendations Upgrade to version 11.0.27.