Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-14 | 2 | General2 |
| 2026-07-15 | 1 | Active Exploitation1 |
| 2026-07-17 | 2 | General2 |
| 2026-07-18 | 2 | Disclosure1General1 |
| 2026-07-19 | 3 | General3 |
| 2026-07-21 | 2 | Disclosure1General1 |
もし自分の現場で「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training
Post summary
The tweet merely references the CVE and asks about an initial response step, without providing any technical details, exploits, patches, or evidence of active exploitation.
CVE-2026-59083: Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass https://www.openwall.com/lists/oss-security/2026/07/14/7 CVE-2026-59084: Apache Tomcat: EncryptInterceptor requirements not clearly documented https://www.openwall.com/lists/oss-security/2026/07/14/8
Post summary
The text announces two new Apache Tomcat CVEs, providing brief technical details for each but no links to PoC, exploits, or patches.
A lot of offensive activities were identified targeting Apache Tomcat (CVE-2026-59083) https://vuldb.com/vuln/378266/cti
Post summary
The post reports that many threat actors are actively targeting Apache Tomcat CVE‑2026‑59083, but provides no exploit code, patch details, or technical depth.
【3軸解説】「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post outlines the announcement of CVE-2026‑59083 for Apache Tomcat, summarizing its background, purpose, and effect, but offers no technical, exploit, patch, or active‑usage details.
もし自分の現場で「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training
Post summary
The post poses a hypothetical question about first steps for CVE‑2026‑59083, outlines a general incident‑response framework, and links to free training resources, but provides no technical, PoC, or exploitation details.
【3軸解説】「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The tweet presents a high-level overview of Apache Tomcat vulnerabilities (CVE-2026-59083) but lacks detailed technical, exploitation, or remediation information.
「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ 無料プログラム: https://www.intect-i.jp/local-program/?utm_source=sns&utm_medium=social&utm_campaign=local_program
Post summary
The post merely names the CVE and asks how to summarize it, with no technical or exploit details provided.
【3軸解説】「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post briefly discusses CVE-2026-59083 and links to a free analysis tool, but provides no technical details, PoC, exploit code, or patch information.
【3軸解説】「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post offers a general overview of multiple Apache Tomcat vulnerabilities, specifically CVE‑2026‑59083, discussing background, purpose, and effect, but provides no technical, exploit, patch, or active‑exploitation details.
【3軸解説】「Apache Tomcatにおける複数の脆弱性(2026年7月14日)（CVE-2026-59083）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post merely references CVE‑2026‑59083 and provides no technical, PoC, exploit, patch, or exploitation details.
🚨*CVE* CVE-2026-59083 Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issu… https://www.cve.org/CVERecord?id=CVE-2026-59083 ----- Traducción: CVE-2026-59083 Man… http://infoflow.cloud`
Post summary
The tweet simply announces CVE-2026-59083, notes it is a Tomcat rewrite valve URL‑encoding flaw that can bypass security constraints, and links to the CVE record. No exploit, patch, or active‑attack evidence is provided.
CVE-2026-59083 Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issu… https://www.cve.org/CVERecord?id=CVE-2026-59083
Post summary
The CVE describes a URL encoding flaw in Apache Tomcat’s rewrite valve that can bypass security constraints for certain configurations.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | tomcat | - | - | - |