CVE-2026-77791

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M5 through 11.0.25 Apache Tomcat versions 10.1.8 through 10.1.59 Apache Tomcat versions 9.0.74 through 9.0.121 Apache Tomcat versions 8.5.88 through 8.5.100

Description An uncontrolled resource consumption issue occurs during the sending of a WebSocket close message, which can be leveraged to perform a Denial of Service (DoS) attack. DoS is a condition where a system becomes unavailable to its intended users.

Recommendations Upgrade to version 11.0.26 Upgrade to version 10.1.60 Upgrade to version 9.0.122 At the moment, there is no information about a newer version that contains a fix for this vulnerability for versions 8.5.88 through 8.5.100.