Improper Handling of Case Sensitivity in Apache Tomcat

CVE-2026-43513

What is CVE-2026-43513?

The Apache Tomcat server is affected by a vulnerability that arises from improper handling of case sensitivity within the LockOutRealm component. This flaw may allow unauthorized access or result in refusal of service due to incorrect validation of user credentials. Affected versions range from 11.0.0-M1 through 11.0.21, and similar versions down to 7.0.0. Users are encouraged to upgrade to versions 11.0.22, 10.1.55, or 9.0.118, which rectify this security flaw.

References