Skip to content
OpenAdvisories

Archive

23 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /23 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-86350 Public exploit

    Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

    Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.2…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • Critical 9.8
    CVE-2026-76183 Public exploit

    Apache Tomcat: Bypass of security constraints for WebSocket endpoints

    Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 …

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu