CVE-2026-74049: Apache Tomcat 11.0.0-M1 through 11.0.26, 10.1.0-M1 through 10.1.60, 9.0.0.M1 through 9.0.122, 8.5.0 through 8.5.100…

Affected technology

Apache Tomcat · 11.0.0-M1 through 11.0.26, 10.1.0-M1 through 10.1.60, 9.0.0.M1 through 9.0.122, 8.5.0 through 8.5.100, 7.0.0 through 7.0.109
Apache Software Foundation

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 20-Oct-2026 14:39 UTC

CWE: CWE-698
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-20 14:38:59.929787+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-74049.html