CVE-2026-55955

CVE-2026-55955 is an Apache Tomcat vulnerability described as an improper authentication issue that allows a replay attack against the EncryptionInterceptor in the cluster component. Affected releases include Tomcat 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.13 through 9.0.18, 8.5....