Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-65905

Fixed in a distro release EPSS <1%CVSS 9.8

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window.   This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.

Published 2026-08-25 · CVE record · OSV

Products: Apache Software Foundation Apache Tomcat

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.tomcat.embed:tomcat-embed-core11.0.25
Mavenorg.apache.tomcat.embed:tomcat-embed-core10.1.58
Mavenorg.apache.tomcat.embed:tomcat-embed-core9.0.121
Mavenorg.apache.tomcat.embed:tomcat-embed-coreno fix
Mavenorg.apache.tomcat:tomcat11.0.25
Mavenorg.apache.tomcat:tomcat10.1.58
Mavenorg.apache.tomcat:tomcat9.0.121
Mavenorg.apache.tomcat:tomcatno fix
Mavenorg.apache.tomcat:tomcat-catalina11.0.25
Mavenorg.apache.tomcat:tomcat-catalina10.1.58
Mavenorg.apache.tomcat:tomcat-catalina9.0.121
Mavenorg.apache.tomcat:tomcat-catalinano fix

Distro releases

ReleasePackageFixed in
Chainguardcamunda-8.88.8.37-r1
Chainguardcamunda-8.98.9.18-r1
Chainguardcamunda-zeebe-8.68.6.39-r12
Chainguardcamunda-zeebe-8.78.7.38-r1
Chainguardcamunda-zeebe-8.88.8.37-r1
Chainguardcamunda-zeebe-8.98.9.18-r1
Chainguardconductor3.32.1-r7
Chainguardconductor-fips3.32.1-r5
Chainguardkayenta-2025.22025.2.4-r9
Chainguardkayenta-2025.42025.4.6-r14
Chainguardkayenta-2026.02026.0.7-r4
Chainguardkayenta-2026.12026.1.2-r5
Chainguardkayenta-2026.22026.2.5-r1
Chainguardkayenta-fips-2025.22025.2.4-r9
Chainguardkayenta-fips-2025.42025.4.6-r8
Chainguardkayenta-fips-2026.02026.0.5-r3
Chainguardkayenta-fips-2026.12026.1.2-r5
Chainguardkayenta-fips-2026.22026.2.5-r2
Chainguardnacos3.2.4-r1
Chainguardnacos-docker3.2.4-r1
Chainguardontop5.5.0-r23
Chainguardontop-fips5.5.0-r17
Chainguardthingsboard-tb-mqtt-transport4.3.1.4-r2
Chainguardthingsboard-tb-node4.3.1.4-r2
Debian 12tomcat10no fix
Debian 12tomcat99.0.70-2
Debian 13tomcat10no fix
Debian 13tomcat11no fix
Debian 13tomcat99.0.70-2
Debian 14tomcat1010.1.60-1
Debian 14tomcat11no fix
Debian 14tomcat99.0.70-2
Red Hat hummingbird 1tomcat100:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-admin-webapps0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-common0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-docs-webapp0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-el-5.0-api0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-jsp-3.1-api0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-lib0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-servlet-6.0-api0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-user-instance0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat10-webapps0:10.1.59-0.1.hum1
Red Hat hummingbird 1tomcat110:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-admin-webapps0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-common0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-docs-webapp0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-el-6.0-api0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-jsp-4.0-api0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-lib0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-servlet-6.1-api0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-user-instance0:11.0.25-0.1.hum1
Red Hat hummingbird 1tomcat11-webapps0:11.0.25-0.1.hum1
Red Hat jboss enterprise web server 6.2jws6-tomcat0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-admin-webapps0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-admin-webapps0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-admin-webapps0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-docs-webapp0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-docs-webapp0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-docs-webapp0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-el-5.0-api0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-el-5.0-api0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-el-5.0-api0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-javadoc0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-javadoc0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-javadoc0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-jsp-3.1-api0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-jsp-3.1-api0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-jsp-3.1-api0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-lib0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-lib0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-lib0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-selinux0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-selinux0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-selinux0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-servlet-6.0-api0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-servlet-6.0-api0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-servlet-6.0-api0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-webapps0:10.1.49-16.redhat_00016.1.el9jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-webapps0:10.1.49-16.redhat_00016.1.el10jws
Red Hat jboss enterprise web server 6.2jws6-tomcat-webapps0:10.1.49-16.redhat_00016.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-admin-webapps0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-admin-webapps0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-admin-webapps0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-docs-webapp0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-docs-webapp0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-docs-webapp0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-el-5.0-api0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-el-5.0-api0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-el-5.0-api0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-javadoc0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-javadoc0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-javadoc0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-jsp-3.1-api0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-jsp-3.1-api0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-jsp-3.1-api0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-lib0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-lib0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-lib0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-selinux0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-selinux0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-selinux0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-servlet-6.0-api0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-servlet-6.0-api0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-servlet-6.0-api0:11.0.21-7.redhat_00006.1.el10jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-webapps0:11.0.21-7.redhat_00006.1.el8jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-webapps0:11.0.21-7.redhat_00006.1.el9jws
Red Hat jboss enterprise web server 7.0jws7-tomcat-webapps0:11.0.21-7.redhat_00006.1.el10jws
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOStomcat9.0.121-150200.120.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSStomcat9.0.121-150200.120.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOStomcat9.0.121-150200.120.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOStomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSStomcat9.0.121-150200.120.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSStomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP7tomcat9.0.121-150200.120.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP7tomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP7tomcat1111.0.25-150600.13.33.2
SUSE Linux Enterprise Server 12 SP5-LTSStomcat9.0.121-3.177.3
SUSE Linux Enterprise Server 15 SP4-LTSStomcat9.0.121-150200.120.1
SUSE Linux Enterprise Server 15 SP5-LTSStomcat9.0.121-150200.120.1
SUSE Linux Enterprise Server 15 SP5-LTSStomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise Server 15 SP6-LTSStomcat9.0.121-150200.120.1
SUSE Linux Enterprise Server 15 SP6-LTSStomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise Server 15 SP6-LTSStomcat1111.0.25-150600.13.33.2
SUSE Linux Enterprise Server 16.0tomcat9.0.121-160000.1.1
SUSE Linux Enterprise Server 16.0tomcat1010.1.59-160000.1.1
SUSE Linux Enterprise Server 16.0tomcat1111.0.25-160000.1.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5tomcat9.0.121-3.177.3
SUSE Linux Enterprise Server for SAP Applications 15 SP4tomcat9.0.121-150200.120.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5tomcat9.0.121-150200.120.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5tomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6tomcat9.0.121-150200.120.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6tomcat1010.1.59-150200.5.79.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6tomcat1111.0.25-150600.13.33.2
SUSE Linux Enterprise Server for SAP applications 16.0tomcat9.0.121-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0tomcat1010.1.59-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0tomcat1111.0.25-160000.1.1
Ubuntu 24.04 LTStomcat10no fix
Ubuntu 24.04 LTStomcat9no fix
Ubuntu 26.04 LTStomcat10no fix
Ubuntu 26.04 LTStomcat11no fix
Ubuntu 26.04 LTStomcat9no fix
Ubuntu 26.10tomcat10no fix
Ubuntu 26.10tomcat11no fix
Ubuntu 26.10tomcat9no fix
Ubuntu Pro 14.04 LTStomcat6no fix
Ubuntu Pro 14.04 LTStomcat7no fix
Ubuntu Pro 16.04 LTStomcat7no fix
Ubuntu Pro 16.04 LTStomcat8no fix
Ubuntu Pro 18.04 LTStomcat8no fix
Ubuntu Pro 18.04 LTStomcat9no fix
Ubuntu Pro 20.04 LTStomcat9no fix
Ubuntu Pro 22.04 LTStomcat9no fix
Wolfithingsboard-tb-mqtt-transport4.3.1.4-r2
Wolfithingsboard-tb-node4.3.1.4-r2
openSUSE Leap 16.0tomcat9.0.121-160000.1.1
openSUSE Leap 16.0tomcat1010.1.59-160000.1.1
openSUSE Leap 16.0tomcat1111.0.25-160000.1.1
openSUSE Tumbleweedtomcat9.0.121-1.1
openSUSE Tumbleweedtomcat1010.1.59-1.1
openSUSE Tumbleweedtomcat1111.0.25-1.1