Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

23 matches found

F5 Networks
F5 Networks•added 2026/10/13 1:50 p.m.•20 views

K000163690: Apache Tomcat vulnerabilities CVE-2026-78437, CVE-2026-86248, and CVE-2026-87022

Security Advisory Description CVE-2026-78437 Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, fro...

9.8CVSS6.1AI score0.0054EPSS
SaveExploits0
osv_bit
osv_bit•added 2026/10/01 9:36 a.m.•19 views

BIT-TOMCAT-2026-87022 Apache Tomcat: WebSocket message smuggling with per-message-deflate

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.0 through 10.1.59, from 9.0.0 through 9.0.121. The following versions we...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/10/01 12:00 a.m.•9 views

PT-2026-105214

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.0 through 10.1.59, from 9.0.0 through 9.0.121. The following versions we...

7.5CVSS6.1AI score0.0054EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE•added 2026/09/28 4:22 p.m.•16 views

CVE-2026-87022

A flaw was found in Apache Tomcat. This vulnerability, related to improper handling of length parameters, allows for WebSocket message smuggling when the 'per-message-deflate' extension is in use. A remote attacker could exploit this to bypass security controls or inject malicious data into...

7.5CVSS6.1AI score0.0054EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE•added 2026/09/24 4:26 p.m.•28 views

SUSE CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

5.3CVSS6AI score0.0054EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus•added 2026/09/24 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-87022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This iss...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References4
NVD
NVD•added 2026/09/23 12:17 p.m.•20 views

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS0.0054EPSS
SaveExploits0References2
osv_debian
osv_debian•added 2026/09/23 12:17 p.m.•18 views

DEBIAN-CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/09/23 12:17 p.m.•18 views

UBUNTU-CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve•added 2026/09/23 12:17 p.m.•37 views

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References6
CVE
CVE•added 2026/09/23 11:32 a.m.•133 views

CVE-2026-87022

Apache Tomcat is vulnerable to WebSocket message smuggling due to an improper handling of length parameter inconsistency when the per-message-deflate feature is enabled. This vulnerability affects versions 11.0.0-M1 through 11.0.25 , 10.1.0-M1 through 10.1.59 , and 9.0.0.M1 through 9.0.121 . Addi...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/09/23 11:32 a.m.•19 views

CVE-2026-87022 Apache Tomcat: WebSocket message smuggling with per-message-deflate

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

6AI score0.0054EPSS
SaveExploits0References1
Mend
Mend•added 2026/09/23 11:32 a.m.•36 views

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

8.7CVSS6AI score0.0054EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/09/23 11:32 a.m.•18 views

EUVD-2026-85236

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6AI score0.0054EPSS
SaveExploits0References1
Debian CVE
Debian CVE•added 2026/09/23 11:32 a.m.•44 views

CVE-2026-87022

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6AI score0.0054EPSS
SaveExploits0
Cvelist
Cvelist•added 2026/09/23 11:32 a.m.•58 views

CVE-2026-87022 Apache Tomcat: WebSocket message smuggling with per-message-deflate

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

0.0054EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/23 12:00 a.m.•27 views

CVE-2026-87022: Improper Handling of Length Parameter Inconsistency

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6.1AI score0.0054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/23 12:00 a.m.•8 views

CVE-2026-87022: Improper Handling of Length Parameter Inconsistency

Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...

7.5CVSS6.1AI score0.0054EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux•added 2026/09/16 3:15 p.m.•16 views

tomcat: Apache Tomcat: WebSocket message smuggling via improper length handling

A flaw was found in Apache Tomcat. This vulnerability, related to improper handling of length parameters, allows for WebSocket message smuggling when the 'per-message-deflate' extension is in use. A remote attacker could exploit this to bypass security controls or inject malicious data into...

7.5CVSS6.1AI score0.0054EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux•added 2026/09/16 3:12 p.m.•17 views

tomcat: Apache Tomcat: WebSocket message smuggling via improper length handling

A flaw was found in Apache Tomcat. This vulnerability, related to improper handling of length parameters, allows for WebSocket message smuggling when the 'per-message-deflate' extension is in use. A remote attacker could exploit this to bypass security controls or inject malicious data into...

7.5CVSS6.1AI score0.0054EPSS
SaveExploits0References5
Rows per page
Query Builder