Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-26 | 1 | Disclosure1 |
| 2026-08-27 | 2 | Disclosure2 |
| 2026-09-01 | 2 | Patch2 |
| 2026-09-05 | 1 | General1 |
| 2026-09-09 | 1 | Disclosure1 |
| 2026-09-11 | 1 | Patch1 |
| 2026-09-12 | 1 | Patch1 |
Apache Tomcat is affected by CVE-2026-65905 (CVSS 9.8 - Critical), a DIGEST authenticator replay flaw that can allow one-time request replay. Upgrade to 11.0.25, 10.1.58, or 9.0.121. Read more: https://ow.ly/VYwQ50ZHHsR https://t.co/DIANl1Ilkv
Post summary
Apache Tomcat CVE-2026-65905 is a critical DIGEST authenticator replay flaw; patches are available with recommended upgrades, and no active exploitation or PoC is referenced.
CVE-2026-65905 Apache Tomcat DIGEST Authenticator Authentication Bypass Via Capture-Replay https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-65905
Post summary
The content identifies CVE‑2026‑65905 as an authentication bypass in Apache Tomcat's DIGEST Authenticator using a capture‑replay technique, without providing PoC code, exploitation reports, patches, or debunking information.
【注意】Apache TomcatのDIGEST認証にリプレイ脆弱性、更新を https://www.cybernote.click/2026/09/02/apache-tomcat-cve-2026-65905-digest-replay-bypass/ #IT #Security #cybersecurity
Post summary
The tweet announces a replay vulnerability (CVE-2026-65905) in Apache Tomcat's DIGEST authentication and indicates that an update/patch has been released.
🚨Critical - Apache Tomcat limited DIGEST authentication replay (CVE-2026-65905) If a client sent a DIGEST-authenticated request with a `nonceCount` on the upper boundary of the replay window before `windowSize` requests had been made, that request was replayable once while its `nonceCount` stayed within the window. Narrow, but an attacker who can capture traffic replays an authenticated request. CWE-294; only relevant where DIGEST auth is actually configured. 👉Affected: Tomcat 11.0.0-M1–11.0.24, 10.1.0-M1–10.1.57, 9.0.0.M1–9.0.120, plus EOL 8.5.0–8.5.100 and 7.0.30–7.0.109 | Upgrade to 11.0.25, 10.1.58, or 9.0.121
Post summary
CVE‑2026‑65905 exposes a replay attack in Apache Tomcat’s DIGEST authentication, affecting versions 11.0.0‑M1–11.0.24, 10.1.0‑M1–10.1.57, 9.0.0.M1–9.0.120, and older releases, with upgrades to 11.0.25, 10.1.58, or 9.0.121 recommended.
🔁 Apache Tomcat DIGEST auth is open to replay attacks. CVE-2026-65905 (CVSS 9.8) lets attackers reuse captured nonces to bypass authentication. Check your Tomcat deployments. #cybersecurity #ciso #cto #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-65905?utm_campaign=x https://t.co/1Q7j99Y1l4
Post summary
The tweet announces a new CVE-2026‑65905 affecting Apache Tomcat DIGEST authentication, describing a replay‑attack vulnerability with a high CVSS score, but it does not provide a PoC, exploit, or patch details.
【注意】Apache TomcatのDIGEST認証にリプレイ脆弱性、更新を https://www.cybernote.click/2026/09/02/apache-tomcat-cve-2026-65905-digest-replay-bypass/ #IT #Security #cybersecurity
Post summary
The tweet alerts that CVE‑2026‑65905 is a replay vulnerability in Apache Tomcat’s DIGEST authentication and recommends applying an update, but does not provide PoC, exploit code, or evidence of active exploitation.
【注意】Apache TomcatのDIGEST認証にリプレイ脆弱性、更新を https://www.cybernote.click/2026/09/02/apache-tomcat-cve-2026-65905-digest-replay-bypass/ #IT #Security #cybersecurity
Post summary
The post announces a newly discovered replay vulnerability in Apache Tomcat’s Digest authentication (CVE‑2026‑65905) with a link for updates, but provides no PoC, exploit, or patch details.
【注意】Apache TomcatのDIGEST認証にリプレイ脆弱性、更新を https://www.cybernote.click/2026/09/02/apache-tomcat-cve-2026-65905-digest-replay-bypass/ #IT #Security #cybersecurity
Post summary
The post warns about a replay vulnerability in Tomcat's DIGEST authentication and points to a URL for more information, without providing detail on exploitation or fixes.
@wazuh Apache rates CVE-2026-65905 Low, not Critical. It requires DIGEST authentication and a specific nonce-count condition, allowing one replay while that count remains in the window. The supported fixes are 11.0.25, 10.1.59, and 9.0.121; 10.1.58 was not released.
Post summary
The CVE-2026-65905 is rated low and requires DIGEST authentication with a nonce-count condition; specific Apache version fixes are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | tomcat | - | - | - |