CVE-2026-80353 | Apache Tomcat up to 9.0.122 APR-Native connector toctou

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Apache Tomcat up to 9.0.122. Impacted is an unknown function of the component APR-Native connector. The manipulation leads to time-of-check time-of-use.

This vulnerability is documented as CVE-2026-80353. The attack needs to be performed locally. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More