Every CVESearch/Get API key

CVE-2026-103119

Apache Tomcat: AJP response mix-up

9.1 CriticalFix available

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.

This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.

Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.59%Unchanged since Oct 21, 2026
90%50%10%1%

What each source reports

CVE List Score used9.1

Apache Tomcat: AJP response mix-up

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.

This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.

Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
CVE-2026-103119
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-127
Updated
2026-11-02
EUVDEUVD-2026-1050129.1

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.

This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.

Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
EUVD-2026-105012
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-64hx-4gc9-f6v49.1

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could...

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.

This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.

Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
GHSA-64hx-4gc9-f6v4
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-127
Updated
2026-11-02
NVD9.1

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.

This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.

Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
CVE-2026-103119
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-127
Updated
2026-11-02
OSVDEBIAN-CVE-2026-1031199.1

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second. This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26. Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
DEBIAN-CVE-2026-103119
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:813657.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:81365
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
Show 4 moreShow less
OSVRHSA-2026:859267.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:85926
CVSS 3.1
7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
OSVUBUNTU-CVE-2026-1031199.1

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second. This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26. Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
UBUNTU-CVE-2026-103119
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVBIT-tomcat-2026-103119No score

Apache Tomcat: AJP response mix-up

Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.

This issue affects Apache Tomcat: from 11.0.0 through 11.0.26.

Users are recommended to upgrade to version 11.0.27, which fixes the issue.

Record
BIT-tomcat-2026-103119
Updated
2026-11-02
OSVopenSUSE-SU-2026:12256-1No score

tomcat11-11.0.27-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.27-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12256-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tomcat
Bitnami
11.0.0 up to 11.0.27
11.0.27
tomcat11
Debian:13
All versions, plus listed versions
11.0.11-111.0.15-111.0.15-1~deb13u111.0.18-111.0.21-1
Show 5 moreShow less
11.0.22-111.0.22-1~deb13u111.0.22-211.0.24-111.0.6-1
None known
tomcat11
Debian:14
All versions, plus listed versions
11.0.11-111.0.15-111.0.15-1~deb13u111.0.18-111.0.21-1
Show 5 moreShow less
11.0.22-111.0.22-1~deb13u111.0.22-211.0.24-111.0.6-1
None known
tomcat11
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-admin-webapps
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-common
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-docs-webapp
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-el-6.0-api
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-jsp-4.0-api
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-lib
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
Show 30 moreShow less
Affected packages
PackageAffectedFixed
tomcat11-servlet-6.1-api
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-user-instance
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat11-webapps
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:11.0.27-0.1.hum1
0:11.0.27-0.1.hum1
tomcat10
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-admin-webapps
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-common
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-docs-webapp
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-el-5.0-api
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-jsp-3.1-api
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-lib
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-servlet-6.0-api
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-user-instance
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat10-webapps
Red Hat:hummingbird:1
From an advisory covering 8 CVEs
before 0:10.1.61-0.1.hum1
0:10.1.61-0.1.hum1
tomcat6
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
6.0.37-16.0.39-16.0.39-1ubuntu0.16.0.39-1ubuntu0.1+esm16.0.39-1ubuntu0.1+esm26.0.39-1ubuntu0.1+esm3
None known
tomcat7
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
7.0.42-17.0.47-17.0.50-17.0.52-17.0.52-1ubuntu0.1
Show 13 moreShow less
7.0.52-1ubuntu0.37.0.52-1ubuntu0.67.0.52-1ubuntu0.77.0.52-1ubuntu0.87.0.52-1ubuntu0.97.0.52-1ubuntu0.107.0.52-1ubuntu0.117.0.52-1ubuntu0.137.0.52-1ubuntu0.147.0.52-1ubuntu0.157.0.52-1ubuntu0.167.0.52-1ubuntu0.16+esm17.0.52-1ubuntu0.16+esm2
None known
tomcat8
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
8.0.26-18.0.28-18.0.30-18.0.32-18.0.32-1ubuntu1
Show 14 moreShow less
8.0.32-1ubuntu1.18.0.32-1ubuntu1.28.0.32-1ubuntu1.38.0.32-1ubuntu1.48.0.32-1ubuntu1.58.0.32-1ubuntu1.68.0.32-1ubuntu1.78.0.32-1ubuntu1.88.0.32-1ubuntu1.98.0.32-1ubuntu1.108.0.32-1ubuntu1.118.0.32-1ubuntu1.138.0.32-1ubuntu1.13+esm18.0.32-1ubuntu1.13+esm2
None known
tomcat7
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
7.0.64-17.0.68-17.0.68-1ubuntu0.17.0.68-1ubuntu0.37.0.68-1ubuntu0.4
Show 4 moreShow less
7.0.68-1ubuntu0.4+esm17.0.68-1ubuntu0.4+esm27.0.68-1ubuntu0.4+esm37.0.68-1ubuntu0.4+esm4
None known
tomcat8
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
8.5.21-1ubuntu18.5.29-18.5.30-18.5.30-1ubuntu18.5.30-1ubuntu1.2
Show 11 moreShow less
8.5.30-1ubuntu1.38.5.30-1ubuntu1.48.5.39-1ubuntu1~18.04.18.5.39-1ubuntu1~18.04.28.5.39-1ubuntu1~18.04.38.5.39-1ubuntu1~18.04.3+esm18.5.39-1ubuntu1~18.04.3+esm28.5.39-1ubuntu1~18.04.3+esm38.5.39-1ubuntu1~18.04.3+esm48.5.39-1ubuntu1~18.04.3+esm58.5.39-1ubuntu1~18.04.3+esm6
None known
tomcat9
Ubuntu:Pro:18.04:LTS
All versions, plus listed versions
9.0.16-3~18.04.19.0.16-3ubuntu0.18.04.19.0.16-3ubuntu0.18.04.29.0.16-3ubuntu0.18.04.2+esm19.0.16-3ubuntu0.18.04.2+esm2
Show 6 moreShow less
9.0.16-3ubuntu0.18.04.2+esm39.0.16-3ubuntu0.18.04.2+esm49.0.16-3ubuntu0.18.04.2+esm59.0.16-3ubuntu0.18.04.2+esm69.0.16-3ubuntu0.18.04.2+esm79.0.16-3ubuntu0.18.04.2+esm8
None known
tomcat9
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
9.0.24-19.0.27-19.0.31-19.0.31-1ubuntu0.19.0.31-1ubuntu0.2
Show 10 moreShow less
9.0.31-1ubuntu0.39.0.31-1ubuntu0.49.0.31-1ubuntu0.59.0.31-1ubuntu0.69.0.31-1ubuntu0.79.0.31-1ubuntu0.89.0.31-1ubuntu0.99.0.31-1ubuntu0.9+esm19.0.31-1ubuntu0.9+esm29.0.31-1ubuntu0.9+esm3
None known
tomcat9
Ubuntu:Pro:22.04:LTS
All versions, plus listed versions
9.0.43-39.0.54-19.0.55-19.0.58-19.0.58-1ubuntu0.1
Show 9 moreShow less
9.0.58-1ubuntu0.1+esm19.0.58-1ubuntu0.1+esm29.0.58-1ubuntu0.1+esm39.0.58-1ubuntu0.1+esm49.0.58-1ubuntu0.29.0.58-1ubuntu0.2+esm19.0.58-1ubuntu0.2+esm29.0.58-1ubuntu0.2+esm39.0.58-1ubuntu0.2+esm4
None known
tomcat10
Ubuntu:24.04:LTS
All versions, plus listed versions
10.1.10-110.1.14-110.1.15-110.1.16-110.1.16-1ubuntu0.1~esm1
Show 4 moreShow less
10.1.16-1ubuntu0.1~esm210.1.16-1ubuntu0.1~esm310.1.16-1ubuntu0.1~esm410.1.55-1ubuntu2~24.04.1
None known
tomcat9
Ubuntu:24.04:LTS
All versions, plus listed versions
9.0.70-1ubuntu19.0.70-29.0.70-2ubuntu0.19.0.70-2ubuntu0.1+esm19.0.70-2ubuntu0.1+esm29.0.70-2ubuntu0.1+esm39.0.118-1~24.04.1
None known
tomcat10
Ubuntu:26.10
All versions, plus listed versions
10.1.40-1ubuntu110.1.54-110.1.54-1ubuntu110.1.54-1ubuntu210.1.55-1ubuntu110.1.55-1ubuntu210.1.57~us1-0ubuntu1
None known
tomcat11
Ubuntu:26.10
All versions, plus listed versions
11.0.18-111.0.22-211.0.22-2ubuntu111.0.22-2ubuntu211.0.24-1ubuntu1
None known
tomcat9
Ubuntu:26.10
All versions, plus listed versions
9.0.115-19.0.115-1ubuntu19.0.118-1
None known
tomcat10
Ubuntu:26.04:LTS
All versions, plus listed versions
10.1.40-1ubuntu110.1.40-1ubuntu1.26.04.110.1.55-1ubuntu2~26.04.1
None known
tomcat9
Ubuntu:26.04:LTS
All versions, plus listed versions
9.0.95-1ubuntu19.0.111-19.0.115-19.0.115-1ubuntu0.19.0.118-1~26.04.1
None known
tomcat11
Ubuntu:26.04:LTS
All versions, plus listed versions
11.0.6-111.0.11-111.0.15-111.0.18-111.0.18-1ubuntu0.1~esm111.0.22-2ubuntu2~26.04.1
None known
tomcat11
openSUSE:Tumbleweed
From an advisory covering 7 CVEs
before 11.0.27-1.1
11.0.27-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-103119 is a critical vulnerability (CVSS 9.1) in Apache Software Foundation Tomcat, published October 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. Fixed in tomcat 11.0.27.

References

Show 52 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open