CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete

<p>Posted by Mark Thomas on Aug 25</p>Severity: moderate<br /> <br /> Affected versions:<br /> <br /> - Apache Tomcat 11.0.20 through 11.0.24<br /> - Apache Tomcat 10.1.53 through 10.1.57<br /> - Apache Tomcat 9.0.115 through 9.0.120<br /> <br /> Description:<br /> <br /> Improper Input Validation vulnerability in Apache Tomcat due to <br /> incomplete fix for CVE-2026-32990.<br /> <br /> This iss