Vulnerabilities CVE-2026-59083

CVE-2026-59083

None

Open

TLP:CLEAR

Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.

Details

EPSS Score ⓘ: 0.37%

29.9th percentile
Confidence: 90%
Published: Jul 14, 2026
Last Modified: Jul 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.