CVE-2026-101356 | Apache Tomcat up to 11.0.26/10.1.60/9.0.122 HTTP 2 Processing/Asynchronous Servlets race condition

October 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Apache Tomcat up to 11.0.26/10.1.60/9.0.122. This impacts an unknown function of the component HTTP 2 Processing/Asynchronous Servlets. Executing a manipulation can lead to race condition.

The identification of this vulnerability is CVE-2026-101356. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More