- 261/2026
- High
Apache has released a security update to address a vulnerability affecting Apache Tomcat.
The addressed vulnerability could allow the attacker to perform denial of service attacks on the affected system.
The addressed vulnerability:
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026- 66299):
- CVSS: 7.5
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Denial-of-Service
Vulnerabilities
CVE-2026-66299
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.