CVE-2026-65905

Katalog CVE

CVSS 9.8 · Critical EPSS 0,56%

Kerentanan Authentication Bypass by Capture-replay pada apache tomcat. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window.   This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.

Advisory KUTIM-CSIRT

• Peringatan Keamanan: 4 Kerentanan Kritis Apache Tomcat (CVSS 9,8) pada Autentikasi dan Akses 24 Sep 2026

Rincian

Terbit di NVD

25 Agustus 2026

Terakhir diubah

27 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-294: Authentication Bypass by Capture-replay

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 45,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj advisory vendor · mailing list
• http://www.openwall.com/lists/oss-security/2026/08/26/4 advisory pihak ketiga · mailing list