CVE-2026-77756 | Apache Tomcat up to 11.0.25/10.1.59/9.0.121/8.5.100 Transfer-Encoding expected behavior violation

A vulnerability identified as critical has been detected in Apache Tomcat up to 11.0.25/10.1.59/9.0.121/8.5.100. The impacted element is an unknown function of the component Transfer-Encoding. Performing a manipulation results in expected behavior violation.

This vulnerability is identified as CVE-2026-77756. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More