UpHeron
All vulnerabilities

Servers and applications

CVE-2026-88041

Apache Tomcat: HTTP/2 trailer header cross-contamination

Severity
Unrated
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
20 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cna:apache software foundation|apache tomcat
  • From 9.0.92 up to 9.0.122
  • From 10.1.27 up to 10.1.60
  • From 11.0.0-M23 up to 11.0.26

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-88041