← Back

CVE-2026-32990

nvd nist
Published: Apr 9, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, from 9.0.113 through 9.0.115. Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

Affected (3)

Products: Apache: Tomcat
Apache
1 product
Tomcat
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Tomcat
From 10.1.50 to 10.1.53
Tomcat
From 11.0.15 to 11.0.20
Tomcat
From 9.0.113 to 9.0.116

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

Source: security@apache.org
Mailing ListVendor Advisory

Timeline

No history available yet.