CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It affects Apache.
CVE
CVE-2026-43515
Severity
CRITICAL
CVSS
9.1
EPSS
1.14%
Apache
Original NVD Description
Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)