CVE-2026-66299

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web...

CVE-2026-66299

Summary: CVE-2026-66299 describes an Uncontrolled Resource Consumption (DoS) in Apache Tomcat’s WebSocket chat example. The vulnerability affects Tomcat versions 11.0.0-M20 through 11.0.24, 10.1.24 through 10.1.57, and 9.0.89 through 9.0.120. The root cause is an unbounded buffer for undelivered ...