THREAT OPS › Threat News › CVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
CVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
<p>Posted by Mark Thomas on Aug 25</p>Severity: important<br /> <br /> Affected versions:<br /> <br /> - Apache Tomcat 11.0.0-M1 through 11.0.24<br /> - Apache Tomcat 10.1.0-M1 through 10.1.57<br /> - Apache Tomcat 9.0.0.M1 through 9.0.120<br /> - Apache Tomcat 8.5.0 through 8.5.100<br /> - Apache Tomcat 7.0.0 through 7.0.109 unaffected<br /> - Apache Tomcat before 7.0.0 unaffected<br /> <br /> De
Indicators of compromise
- CVE-2026-65927cve
Original source: https://seclists.org/oss-sec/2026/q3/583