CVE-2026-55276

The CVE-2026-55276 issue is an Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat where the effective web.xml could be logged without including special roles and empty authorisation constraints. Affected versions include Tomcat 11.0.0-M1–11.0.22, 10.1.0-M1–10.1.55, 9.0.0-...