UpHeron
All vulnerabilities

Servers and applications

CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window.   This issue affects Apache Tomcat: from…

Severity
Critical 9.8
Published
25 Aug 2026
Last changed
27 Aug 2026
Added to UpHeron
21 Oct 2026
Fixed in
9.0.121, 10.1.58, 11.0.25
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • From 7.0.30 up to 7.0.109
  • From 8.5.0 before 9.0.121
  • From 10.1.0 before 10.1.58
  • From 11.0.0 before 11.0.25

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-65905
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-65905