HTTP Request/Response Smuggling Vulnerability in Apache Tomcat

CVE-2026-24880

What is CVE-2026-24880?

A vulnerability exists in Apache Tomcat that allows for inconsistent interpretation of HTTP requests, specifically through invalid chunk extensions. This can lead to potential security risks, enabling attackers to perform various forms of attacks by manipulating HTTP requests and responses. Affected users are strongly advised to update to secure versions to mitigate risk.

References