CVE-2026-53404

CVE-2026-53404 describes an always-incorrect control flow issue in Apache Tomcat’s RewriteValve, where the first condition in an OR chain being true causes subsequent non-OR conditions to be skipped. Affected releases include Tomcat 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.0.M1 t...