CVE-2026-79677

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.25 Apache Tomcat versions 10.1.0-M1 through 10.1.59 Apache Tomcat versions 9.0.0.M1 through 9.0.121 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.43 through 7.0.109

Description A resource leak and a comparison using incorrect factors lead to a denial of service. This occurs due to lost timeouts during asynchronous WebSocket writes.

Recommendations Upgrade versions 11.0.0-M1 through 11.0.25 to 11.0.26. Upgrade versions 10.1.0-M1 through 10.1.59 to 10.1.60. Upgrade versions 9.0.0.M1 through 9.0.121 to 9.0.122.