THREATOPS
THREAT OPSThreat News › CVE-2026-66299: Apache Tomcat: DoS via WebSocket chat example

CVE-2026-66299: Apache Tomcat: DoS via WebSocket chat example

medoss_secPublished 2026-07-28

<p>Posted by Mark Thomas on Jul 28</p>Severity: low<br /> <br /> Affected versions:<br /> <br /> - Apache Tomcat 11.0.0-M20 through 11.0.24<br /> - Apache Tomcat 10.1.24 through 10.1.57<br /> - Apache Tomcat 9.0.89 through 9.0.120<br /> - Apache Tomcat through 8.5.100 unaffected<br /> <br /> Description:<br /> <br /> Uncontrolled Resource Consumption vulnerability in Apache Tomcat&apos;s <br /> We

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/313