Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application are not affected by this issue. Users are recommended to remove the examples web application or to upgrade to version 11.0.25, 10.1.58 or 9.0.121 (when released), which fix the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-28 | 1 | Disclosure1 |
| 2026-07-29 | 2 | General1Patch1 |
| 2026-07-31 | 1 | General1 |
| 2026-08-01 | 1 | General1 |
| 2026-08-03 | 1 | General1 |
Guess I'm one of the few who thinks it was a good move to not release a fix for CVE-2026-66299 on the tomcat-example site 😅 It's unfortunately also clear that many blindly update dependencies rather than look at what a CVE's impact is.
Post summary
The tweet offers a sarcastic opinion that it was a good decision not to release a fix for CVE‑2026‑66299, highlighting concerns about automatic dependency updates.
It is possible to see elevated activities targeting Apache Tomcat (CVE-2026-66299) https://vuldb.com/vuln/383887/cti
Post summary
The post references elevated activity around Apache Tomcat CVE-2026-66299 but provides no PoC, exploit, patch, or evidence of active exploitation.
【3軸解説】「Apache TomcatのWebSocket chatサンプルにおけるサービス運用妨害（DoS）の脆弱性（2026年7月28日）（CVE-2026-66299）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コン… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post mentions CVE-2026-66299 as a DoS flaw in Apache Tomcat’s WebSocket chat sample but provides only a high-level overview without PoC, exploit code, or patch information.
【3軸解説】「Apache TomcatのWebSocket chatサンプルにおけるサービス運用妨害（DoS）の脆弱性（2026年7月28日）（CVE-2026-66299）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コン… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post delivers a concise overview of CVE-2026-66299, describing it as a DoS issue in Apache Tomcat's WebSocket chat sample, without providing PoC, exploit code, or patch details.
【3軸解説】「Apache TomcatのWebSocket chatサンプルにおけるサービス運用妨害（DoS）の脆弱性（2026年7月28日）（CVE-2026-66299）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コン… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post provides a brief analysis of a recently disclosed DoS vulnerability (CVE‑2026‑66299) in Apache Tomcat’s WebSocket chat sample, but does not include a PoC, exploit code, active exploitation evidence, or patch information.
CVE-2026-66299 Uncontrolled Resource Consumption in Apache Tomcat WebSocket Chat Example https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-66299
Post summary
CVE-2026-66299 is disclosed as an uncontrolled resource consumption issue in Apache Tomcat's WebSocket chat example, with additional details available via the provided link.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | tomcat | - | - | - |
| App | apache | tomcat | 11.0.0 | - | - |
| App | apache | tomcat | 11.0.0 | - | - |
| App | apache | tomcat | 11.0.0 | - | - |
| App | apache | tomcat | 11.0.0 | - | - |
| App | apache | tomcat | 11.0.0 | - | - |
| App | apache | tomcat | 11.0.0 | - | - |
| App | apache | tomcat | 11.0.0 | - | - |