CVE-2026-86350

creationtimestamp| type| source ---|---|--- 2026-09-23 13:10:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sub3gjz2d 2026-09-23 18:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mw7dhjmfrb2y...

CVE-2026-86350

Apache Tomcat versions 11.0.22 through 11.0.25 , 10.1.55 through 10.1.59 , and 9.0.118 through 9.0.121 are vulnerable to an HTTP Request/Response smuggling vulnerability. This issue is caused by a regression in the fix for CVE-2026-41293 regarding the inconsistent interpretation of HTTP/2 request...