Apache Tomcat HTTP/2 SNI bypass CVE-2026-32990 patched in latest releases
1. Executive summary Apache Tomcat contains an improper input validation flaw, CVE-2026-32990, that lets an HTTP/2 client omit the :authority pseudo-header and
27 Oct 2026 · 6 min read
read →