Buffer Under-Read Vulnerability in Apache Tomcat by Apache

CVE-2026-103119

What is CVE-2026-103119?

A buffer under-read vulnerability in Apache Tomcat may occur during large non-blocking writes, resulting in the response body potentially being split across requests. This can lead to the failure of subsequent requests and might expose sensitive data from the previous response. Users of affected versions are strongly advised to upgrade to version 11.0.27 to mitigate this vulnerability.

References