high7.5
CVE-2026-88041
Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request.
Impact
Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.0.122. Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Apache Tomcat: From 11.0.0-M23 | through 11.0.26 |
| From 10.1.27 | through 10.1.60 | |
| From 9.0.92 | through 9.0.122. |
Versions were read from the advisory text. No structured product data has been published for this record yet.