CVE-2026-55957

CVE-2026-55957 describes an authentication bypass in Apache Tomcat when JNDIRealm authenticates binds using GSSAPI, due to a missing critical step. Affected versions: Tomcat 11.0.0-M1 to 11.0.4; 10.1.0-M1 to 10.1.36; 9.0.0.M1 to 9.0.100; 8.5.0 to 8.5.100; 7.0.0 to 7.0.109. Upstream fixes are avai...