Esecurityplanet

Apache Tomcat Vulnerability Allows Bypass of Access Controls

First seen 21 Feb 2026, 04:19 UTC • Cybersecuritynews

•29.9

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Apache disclosed a vulnerability in Tomcat (CVE-2026-24733) that allows attackers to bypass access controls through legacy HTTP/0.9 requests under specific configurations. This low-severity issue was identified by the Apache Tomcat security team and affects systems using certain access-control rules. The original advisory was published on February 17, 2026.

How this analysis works

Timeline

2026-02-17

CVE-2026-24733 published

2026-02-20

Cybersecuritynews article published

2026-02-21

Esecurityplanet article published

Attack Flow

Continue Reading

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws Critical Oracle WebLogic Flaw Under Active Exploitation FamousSparrow APT Expands Targeting to Azerbaijani Energy Sector Critical Apache HTTP Server Vulnerability Poses Remote Code Execution Risk Critical RCE Vulnerability in Windchill and FlexPLM Triggers Urgent Alerts

Apache Tomcat Vulnerability Allows Bypass of Access Controls

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading