VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Apr 9, 2026· Updated Apr 14, 2026

CVE-2026-32990

CVE-2026-32990

Description

Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.

This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, from 9.0.113 through 9.0.115.

Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.tomcat:tomcat-coyoteMaven
>= 9.0.113, < 9.0.1169.0.116
org.apache.tomcat:tomcat-coyoteMaven
>= 10.1.50, < 10.1.5310.1.53
org.apache.tomcat:tomcat-coyoteMaven
>= 11.0.15, < 11.0.2011.0.20
org.apache.tomcat:tomcatMaven
>= 9.0.113, < 9.0.1169.0.116
org.apache.tomcat:tomcatMaven
>= 10.1.50, < 10.1.5310.1.53
org.apache.tomcat:tomcatMaven
>= 11.0.15, < 11.0.2011.0.20
org.apache.tomcat.embed:tomcat-embed-coreMaven
>= 9.0.113, < 9.0.1169.0.116
org.apache.tomcat.embed:tomcat-embed-coreMaven
>= 10.1.50, < 10.1.5310.1.53
org.apache.tomcat.embed:tomcat-embed-coreMaven
>= 11.0.15, < 11.0.2011.0.20

Affected products

56

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.