CVE-2026-80353: Apache Tomcat 9.0.47 through 9.0.122

Affected technology

Apache Tomcat · 9.0.47 through 9.0.122
Apache Software Foundation

Component: Not specified by the source

What an attacker can do

The source says time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket.