UpHeron
All vulnerabilities

Servers and applications

CVE-2026-101356

Apache Tomcat: HTTP/2 request/response mix-up after error during async processing

Severity
Unrated
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
20 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cna:apache software foundation|apache tomcat
  • From 9.0.118 up to 9.0.122
  • From 10.1.55 up to 10.1.60
  • From 11.0.22 up to 11.0.26

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-101356