Lucene search
+L

CVE-2026-66299

🗓️ 28 Jul 2026 14:29:05Reported by apacheType 
cve
 cve
🔗 web.nvd.nist.gov👁 299 Views

Uncontrolled resource consumption in Tomcat WebSocket chat example; upgrade or remove the examples app.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2026-66299
28 Jul 202614:29
attackerkb
circl
Circl
CVE-2026-66299
28 Jul 202616:13
circl
cvelist
Cvelist
CVE-2026-66299 Apache Tomcat: DoS via WebSocket chat example
28 Jul 202614:29
cvelist
debiancve
Debian CVE
CVE-2026-66299
28 Jul 202614:29
debiancve
euvd
EUVD
EUVD-2026-49855
28 Jul 202614:29
euvd
f5
F5 Networks
K000162737: Apache Tomcat vulnerability CVE-2026-66299
3 Aug 202618:19
f5
nvd
NVD
CVE-2026-66299
28 Jul 202615:17
nvd
osv
OSV
BIT-TOMCAT-2026-66299 Apache Tomcat: DoS via WebSocket chat example
17 Aug 202605:56
osv
osv
OSV
DEBIAN-CVE-2026-66299
28 Jul 202615:17
osv
osv
OSV
MINI-4JFG-GV9H-WRVV
13 Aug 202619:40
osv
Rows per page
NVD
Vulners
Node
OR
apachetomcatRange9.0.899.0.121
apachetomcatRange10.1.2410.1.58
apachetomcatRange11.0.111.0.25
apachetomcatMatch11.0.0milestone20
apachetomcatMatch11.0.0milestone21
apachetomcatMatch11.0.0milestone22
apachetomcatMatch11.0.0milestone23
apachetomcatMatch11.0.0milestone24
apachetomcatMatch11.0.0milestone25
apachetomcatMatch11.0.0milestone26
[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "11.0.24",
        "status": "affected",
        "version": "11.0.0-M20",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.1.57",
        "status": "affected",
        "version": "10.1.24",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.120",
        "status": "affected",
        "version": "9.0.89",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.5.100",
        "status": "unaffected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Aug 2026 18:46Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.17.5
EPSS0.00451
SSVC
299