CVE Feed

    Dashboard / CVE / CVE-2026-68763

    CVE-2026-68763

    Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.59 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.

    Published:Aug 25, 2026
    Last Modified:Aug 27, 2026
    EPS:Aug 25, 2026
    EPSS Score:0.00547
    CVSS Score:7.5

    Affected Products

    Vendor
    Apache
    Product
    Apache Tomcat
    Vendor
    Apache
    Product
    Tomcat

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-68525 (CVSS 9.1) — Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a…
    CVE-2026-65183 (CVSS 8.1) — Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain soc…
    CVE-2026-59084 (CVSS 9.1) — Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configu…
    CVE-2026-59083 (CVSS 9.1) — Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed securi…
    CVE-2026-42498 (CVSS 7.3) — Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Ap…
    CVE-2026-32990 (CVSS 5.3) — Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This iss…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High