CVE-2026-97888 | Apache TomEE up to 10.0.0-M0/10.2.0/11.0.0-M1 Embedded HTTP Server privileges management

November 10, 2026 Yanac

A vulnerability described as critical has been identified in Apache TomEE up to 10.0.0-M0/10.2.0/11.0.0-M1. This impacts an unknown function of the component Embedded HTTP Server. Executing a manipulation can lead to improper privilege management.

This vulnerability is handled as CVE-2026-97888. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More