CVE-2026-68569

creationtimestamp| type| source ---|---|--- 2026-08-26 01:18:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/e4m6sbzd7ptti 2026-08-26 07:10:24+00:00| seen| https://bsky.app/profile/potato.software/post/3mtxrovyr5i2u 2026-08-26 07:10:24+00:00| seen|...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.120), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-68569 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.120)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.1.1 Source cves: CVE-2026-68569 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302888...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.24), org.apache.tomee:apache-tomee (11.0.0-m1) +10 more potentially affected by CVE-2026-68569 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.24)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =3.0.0, =3.0.0, =11.0.0, =11.1.3 Source cves: CVE-2026-68569 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302888...

DEBIAN-CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-68569 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.57)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-68569 Source advisory: MEND:CVE-2026-68569...