Apache Tomcat: Apache Tomcat: Incorrect control flow in rewrite valve allows unexpected rule processing

A flaw was found in Apache Tomcat's rewrite valve. This vulnerability involves an incorrect control flow implementation where, during the processing of rewrite rules, if the first condition in an OR chain matched, subsequent non-OR conditions were unexpectedly skipped. This can lead to unintended...

CVE-2026-53404

The Apache Tomcat rewrite valve contains an Always-Incorrect Control Flow Implementation vulnerability (CVE-2026-53404 ). Due to this flaw, if the first condition in an OR chain matches, subsequent non-OR conditions are skipped, which can allow an attacker to circumvent access control restriction...