QwikSec

Security Database

CVE

CWE

Training

CVE-2026-32990

Published: Apr 9, 2026

Modified: Apr 10, 2026

PUBLISHED

Description

Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, from 9.0.113 through 9.0.115. Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

Vendor	Product	Versions
Apache Software Foundation	Apache Tomcat	affected `11.0.15 - <= 11.0.19` affected `10.1.50 - <= 10.1.52` affected `9.0.113 - <= 9.0.115`

Weaknesses (CWE)

References

https://lists.apache.org/thread/1nl9zqft0ksqlhlkd3j4obyjz1ghoyn7

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.