Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-78437

Опубликовано: 23 сент. 2026
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail.

This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121.

Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.

EPSS

Процентиль: 44%
0.00511
Низкий

7.3 High

CVSS3

Дефекты

CWE-459

Связанные уязвимости

CVSS3: 7.3
ubuntu
около 2 месяцев назад

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.

CVSS3: 5.3
redhat
около 2 месяцев назад

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.

CVSS3: 7.3
debian
около 2 месяцев назад

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed r ...

CVSS3: 7.3
redos
17 дней назад

Уязвимость tomcat11

CVSS3: 7.3
redos
17 дней назад

Уязвимость tomcat10

EPSS

Процентиль: 44%
0.00511
Низкий

7.3 High

CVSS3

Дефекты

CWE-459