Execution After Redirect Vulnerability in Apache Tomcat

CVE-2026-74049

What is CVE-2026-74049?

An Execution After Redirect (EAR) vulnerability in Apache Tomcat allows an attacker to take advantage of improper handling of redirects. This flaw affects multiple versions of Apache Tomcat, making it essential for users to upgrade to the latest stable releases to mitigate potential risks. The affected versions include various releases from 11.0.0-M1 to 11.0.26, among others. To ensure protection against this vulnerability, users are encouraged to update to version 11.0.27, 10.1.61, or 9.0.123 where the issue has been resolved.

References