Authentication Bypass by Alternate Name

Overview org.apache.tomcat:tomcat-websocket is a Tomcat WebSocket JSR356 implementation. Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name via the WebSocket endpoint security constraint handling. An attacker can gain unauthorized access to protected...

cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913), cv.igrp:igrp-core-war (>=1.7.2.230622, <=1.7.3.230802) +26 more potentially affected by CVE-2026-87022 via org.apache.tomcat:tomcat-websocket (>=9.0.5, <=9.0.121)

org.apache.tomcat:tomcat-websocket MAVEN version =9.0.5, =1.7.2.230613, =1.7.2.230622, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.16 and more Source cves: CVE-2026-87022 Source advisory: MEND:CVE-2026-87022...

io.github.t1willi:jolt (>=2.6.2, <=25.08.4), org.apache.tomee.bom:tomee-webprofile (11.0.0-m1) +15 more potentially affected by CVE-2026-87022 via org.apache.tomcat:tomcat-websocket (>=11.0.0-m20, <=11.0.25)

org.apache.tomcat:tomcat-websocket MAVEN version =11.0.0-m20, =2.6.2, =11.0.0, =11.1.3 and more Source cves: CVE-2026-87022 Source advisory: MEND:CVE-2026-87022...

com.github.psi-probe:psi-probe-core (4.6.0), com.github.psi-probe:psi-probe-tomcat9 (>=4.6.0, <=4.7.0) +22 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=9.0.118, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.118, =4.6.0, =3.0.120, =3.0.120, =3.0.120, =3.5.0, =9.0.118, =9.0.118, =9.0.118, =9.0.118, =8.0.36, =1.93.0, =1.93.0, =1.93.0, =1.2610.0 and more Source cves: CVE-2026-86350 Source advisory: MEND:CVE-2026-86350...

com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.restx:restx-server-tomcat (1.3.0-rc2) +62 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=11.0.22, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.22, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 - org.apache.meecrowave:meecrowave-core 2.1.1 -...

cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913), cv.igrp:igrp-core-war (>=1.7.2.230622, <=1.7.3.230802) +26 more potentially affected by CVE-2026-79677 via org.apache.tomcat:tomcat-websocket (>=9.0.5, <=9.0.121)

org.apache.tomcat:tomcat-websocket MAVEN version =9.0.5, =1.7.2.230613, =1.7.2.230622, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.16 and more Source cves: CVE-2026-79677 Source advisory: MEND:CVE-2026-79677...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +76 more potentially affected by CVE-2026-77756 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-77756 Source advisory: MEND:CVE-2026-77756...

cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913), cv.igrp:igrp-core-war (>=1.7.2.230622, <=1.7.3.230802) +26 more potentially affected by CVE-2026-76183 via org.apache.tomcat:tomcat-websocket (>=9.0.5, <=9.0.121)

org.apache.tomcat:tomcat-websocket MAVEN version =9.0.5, =1.7.2.230613, =1.7.2.230622, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.16 and more Source cves: CVE-2026-76183 Source advisory: MEND:CVE-2026-76183...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-75973 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.59)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-75973 Source advisory: MEND:CVE-2026-75973...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +69 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.24)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-65182 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341499...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.57)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-65182 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341499...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +184 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.120)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.6.0, =3.2.1036, =1.0.1, =1.3.1, =6.35, =3.1.0, =3.0.0.rc2, =4.6.0 and more Source cves: CVE-2026-65182 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341499...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.57), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.57)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302852...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +184 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.120)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.6.0, =3.2.1036, =1.0.1, =1.3.1, =6.35, =3.1.0, =3.0.0.rc2, =4.6.0 and more Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341744...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.120), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.120)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.1.1 Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20302852...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +69 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.24)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341744...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-68525 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.57)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-68525 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341744...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-66422 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.57)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-66422 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19343977...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +147 more potentially affected by CVE-2026-66422 via org.apache.tomcat:tomcat-catalina (>=9.0.26, <=9.0.120)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.26, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.3.7, =1.0.1, =1.3.1, =6.35, =3.4.2, =3.4.2, =2.1.1, =2.1, =0.1.1, =0.1.4 and more Source cves: CVE-2026-66422 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19343977...

co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0, <=0.7.1) +286 more potentially affected by CVE-2026-65183 via org.apache.tomcat:tomcat-util (>=9.0.43, <=9.0.120)

org.apache.tomcat:tomcat-util MAVEN version =9.0.43, =0.6.2, =0.6.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =5.0.0-m54.0, =3.3.7, =3.4.260 and more Source cves: CVE-2026-65183 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19342001...