ByteOS Network

NVD Vulnerability Details :

CVE-2026-66299

Awaiting Analysis

Source-security@apache.org

Published At-28 Jul, 2026 | 15:17

Updated At-28 Jul, 2026 | 18:17

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application are not affected by this issue. Users are recommended to remove the examples web application or to upgrade to version 11.0.25, 10.1.58 or 9.0.121 (when released), which fix the issue.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
			N/A

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-400	Secondary	security@apache.org

CWE ID: CWE-400

Type: Secondary

Source: security@apache.org

References

Hyperlink	Source	Resource
https://lists.apache.org/thread/8owczcc1o8qw1rxmg9gvfk4w2jnh4l5k	security@apache.org	N/A
http://www.openwall.com/lists/oss-security/2026/07/28/25	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: https://lists.apache.org/thread/8owczcc1o8qw1rxmg9gvfk4w2jnh4l5k

Source: security@apache.org

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2026/07/28/25

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History