Live › vulnerability › CVE-2026-88041
Go to dashboardApache Tomcat did not fully clear HTTP trailer data between requests, so trailer information from a previous request can appear in a later request. An attacker may be able to read data left over from another user's request.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running an affected Apache Tomcat release that serves requests with HTTP trailers, typically behind shared connections or proxies handling multiple users. Systems on Tomcat versions outside the listed ranges are not affected. The sources do not say how easily a request can be made to pick up another request's trailers.
No product ranges from the sources yet.
catalina.sh version and compare it to the affected ranges: 11.0.0-M23 to 11.0.26, 10.1.27 to 10.1.60, and 9.0.92 to 9.0.122.11.0.27 or later.10.1.61 or later.9.0.123 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request.
This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.0.122.
Users are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-88041")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.