As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-103119: Apache Tomcat: AJP response mix-up
CVE-2026-103119 is a buffer under-read vulnerability in Apache Tomcat versions 11.0.0-M25 through 11.0.26 that can cause response bodies to be split between consecutive requests on the same connection. The flaw may result in second request failures and potential leakage of data from the first response to the second request.
Why it matters: Operators running the affected Tomcat versions face a 9.1 CVSS score (3.1) risk of data leakage between requests and application failures, requiring immediate patching and review of any sensitive data transmitted through persistent connections.
- Source published
- First seen by Cybersecurity Tracker