CVE-2026-101296 | Apache Tomcat up to 11.0.26 JNDI Realm improper authentication

October 20, 2026 Yanac

A vulnerability described as critical has been identified in Apache Tomcat up to 7.0.109/8.5.100/9.0.122/10.1.60/11.0.26. This affects an unknown part of the component JNDI Realm. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-101296. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More