CVE-2026-65183

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.42 through 9.0.120

Description A Time-of-check Time-of-use (TOCTOU) Race Condition occurs when creating unix domain sockets, which allows an unauthorized local user to access the socket. A TOCTOU race condition is a software bug where a program checks the state of a resource before using it, but the state changes between the check and the use.

Recommendations Upgrade to version 11.0.25 Upgrade to version 10.1.58 Upgrade to version 9.0.121