Critical Alert 1 Active Exploit Detected Today

CVE-2026-60004 — Gitea Code Injection Vulnerability →
Powered by CVE Watchtower
×
August 26, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-65637NVD

Vulnerability Summary

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990.



This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120.



Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
Severity Level
UNKNOWN
Published Date
Aug 25, 2026
Last Modified
Aug 25, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-20: Improper Input Validation ↗
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.

External References