PT-2026-81878 · Apache · Apache Tomcat

Parag Ambildhuke

·

CVE-2026-65637

·

Published

2026-08-25

·

Updated

2026-09-11

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.20 through 11.0.24 Apache Tomcat versions 10.1.53 through 10.1.57 Apache Tomcat versions 9.0.115 through 9.0.120
Description Improper input validation occurs due to an incomplete fix for a previous issue.
Recommendations Upgrade to version 11.0.25. Upgrade to version 10.1.58. Upgrade to version 9.0.121.

Exploit

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

BIT-TOMCAT-2026-65637
CVE-2026-65637
OPENSUSE-SU-2026:11759-1
OPENSUSE-SU-2026:11760-1
OPENSUSE-SU-2026:11761-1
OPENSUSE-SU-2026:21810-1
OPENSUSE-SU-2026:21811-1

Affected Products

Apache Tomcat