VulnSocial

CVE-2026-32990Patch(apache / tomcat)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apache tomcat systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, from 9.0.113 through 9.0.115. Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

apache CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • tomcat

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-04-09); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
apache
Products
tomcat

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-04-09: 1Mentions · 2026-04-10: 1Mentions · 2026-08-27: 1Mentions · 2026-09-02: 1Patch / Workaround · 2026-08-27: 1Patch / Workaround · 2026-09-02: 1Technical Details · 2026-04-09: 1Technical Details · 2026-08-27: 1Technical Details · 2026-09-02: 104-0904-1008-2709-02
Signal classification3 categories
Patch
250.0%
Disclosure
125.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-091
Disclosure1
2026-04-101
General1
2026-08-271
Patch1
2026-09-021
Patch1
Full discourse4 posts
  • Kazuki Omo@omokazuki
    General

    SIOSセキュリティブログを更新しました。 Apache Tomcatの脆弱性(Important: CVE-2026-34486, Moderate: CVE-2026-34500, CVE-2026-32990, Low: CVE-2026-34487, CVE-2026-34483) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #linux #tomcat #apache https://security.sios.jp/vulnerability/tomcat-security-vulnerability-20260410/

    Post summary

    The tweet announces a blog update listing several Apache Tomcat CVEs with severity labels but provides no details on exploitation, patches, or technical specifics.

    00010165
    361 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 CRITICAL: CVE-2026-65637 in Apache Tomcat (CVSS 9.8) Improper input validation due to incomplete fix for CVE-2026-32990. Affects versions 9.0.115-9.0.120, 10.1.53-10.1.57, 11.0.20-11.0.24. Patch immediately to 9.0.121, 10.1.58, or 11.0.25. #CVE #PatchNow https://t.co/zOdem95q17

    Post summary

    The tweet alerts users to a critical CVE‐2026‑65637 in Apache Tomcat, details affected versions, and urges applying the specified patch releases immediately.

    0000042
    122 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🐱 Apache Tomcat CVSS 9.8: CVE-2026-65637 bypasses strict SNI validation via HTTP/2 no-authority requests. It's an incomplete fix for CVE-2026-32990. Tomcat 9.x, 10.1.x & 11.0.x affected. Patch now. #cybersecurity #ciso #cto #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-65637?utm_campaign=x https://t.co/b63NOOmquZ

    Post summary

    Apache Tomcat CVE-2026-65637 is a high‑severity flaw with a released patch; no PoC or active exploitation details are provided.

    00000140
    881 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-32990 Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, … https://www.cve.org/CVERecord?id=CVE-2026-32990

    Post summary

    The text announces CVE-2026-32990, describing an improper input validation flaw in Apache Tomcat (11.0.15‑11.0.19) caused by an incomplete fix of a prior CVE, with a reference to the CVE record.

    00000185
    57.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appapachetomcat---

Explore more

Back to dashboardapache CVEstomcat vulnerabilities