SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-65637

CRITICAL · CVSS 9.8 EPSS 0.75%

Source: NVD + CISA KEV + EPSS · Published 2026-08-25 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Apache Tomcat versions 11.0.20 to 11.0.24, 10.1.53 to 10.1.57, and 9.0.115 to 9.0.120 are vulnerable due to an improper input validation issue stemming from an incomplete fix of a previous vulnerability. This flaw could potentially lead to exploitation, impacting the security and integrity of applications running on these versions. Organizations using affected versions should prioritize upgrading to 11.0.25, 10.1.58, or 9.0.121 to mitigate the risk.

CVE
CVE-2026-65637
Severity
CRITICAL
CVSS
9.8
EPSS
0.75%
Apache

Original NVD Description

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)