Security Feed
See the latest insights and analysis from our MDR team.
RSS for Slackcve-2026-76183
By Nevo Evenhaim |
23 September 2026
cve-2026-76183 – Apache Tomcat WebSocket security constraints bypass via alternate name auth bypass
Apache Tomcat has an Authentication Bypass by Alternate Name that lets remote attackers bypass configured security constraints for any WebSocket endpoint. Affects 11.0.0-M1-11.0.25, 10.1.0-M1-10.1.59, 9.0.0.M1-9.0.121 (also EOS 8.5.0-8.5.100, 7.0.43-7.0.109). Upgrade to 11.0.26, 10.1.60, or 9.0.122 to mitigate.