CVE-2026-86350

creationtimestamp| type| source ---|---|--- 2026-09-23 13:10:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sub3gjz2d 2026-09-23 18:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mw7dhjmfrb2y 2026-09-23 23:20:04+00:00| seen|...

CVE-2026-86350

Apache Tomcat is vulnerable to an HTTP Request/Response smuggling vulnerability caused by a regression in the fix for CVE-2026-41293 . This issue results in an inconsistent interpretation of HTTP/2 requests , which can trigger a request header mix-up . The vulnerability affects versions 11.0.22 t...