CVE-2026-42498

Apache Tomcat is vulnerable to an Information Disclosure flaw where the HTTP Authentication Header is exposed to unexpected hosts during WebSocket authentication . This issue specifically affects the tomcat-coyote component. The vulnerability impacts several versions, including Tomcat 11.0.0-M1 t...