Skip to content
CVSS 9.8 · CRITICAL

CVE-2026-65637Vulnerabilidad crítica de validación de entrada en Apache Tomcat

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.

Ver en NVD

Análisis

A critical vulnerability was found in Apache Tomcat (versions 9.x, 10.x, and 11.x) due to improper input validation. This issue could lead to remote compromise and requires an immediate upgrade to the latest patched versions.

Severidad

Puntaje: 9.8(CRITICAL)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AV: NETWORK
AC: LOW
PR: NONE
UI: NONE
S: UNCHANGED
C: HIGH
I: HIGH
A: HIGH
Tipo de falla (CWE): CWE-20

EPSS

Probabilidad de explotación (próx. 30 días): 0.0021 (0.2%)
Percentil: 10.8%
EPSS: 2026-08-26

Descripción técnica

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.

Publicada: 25/8/2026, 22:17:05
Última modificación: 26/8/2026, 16:45:12

Referencias

InicioEventosBlogRecursosCursosEquipo