CVE-2026-24880

{
  "id": "CVE-2026-24880",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-09T20:16:24.060",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M1 through 9.0.115, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\nOther, unsupported versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.52 or 9.0.116, which fix the issue."
    },
    {
      "lang": "es",
      "value": "Interpretación Inconsistente de Solicitudes HTTP (’Contrabando de Solicitudes/Respuestas HTTP’) vulnerabilidad en Apache Tomcat mediante extensión de fragmento inválida.\n\nEste problema afecta a Apache Tomcat: desde 11.0.0-M1 hasta 11.0.18, desde 10.1.0-M1 hasta 10.1.52, desde 9.0.0.M1 hasta 9.0.115, desde 8.5.0 hasta 8.5.100, desde 7.0.0 hasta 7.0.109.\nOtras versiones no compatibles también pueden verse afectadas.\n\nSe recomienda a los usuarios actualizar a la versión 11.0.20, 10.1.52 o 9.0.116, las cuales solucionan el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Tomcat",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "11.0.0-M1",
              "lessThanOrEqual": "11.0.18",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "10.1.0-M1",
              "lessThanOrEqual": "10.1.52",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "9.0.0.M1",
              "lessThanOrEqual": "9.0.115",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "8.5.0",
              "lessThanOrEqual": "8.5.100",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "7.0.0",
              "lessThanOrEqual": "7.0.109",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "7.0.0",
              "versionType": "semver",
              "status": "unknown"
            },
            {
              "version": "8.0.0-RC1",
              "lessThanOrEqual": "8.0.53",
              "versionType": "semver",
              "status": "unknown"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-10T18:33:19.886460Z",
          "id": "CVE-2026-24880",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-444"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "9.0.0",
              "versionEndExcluding": "9.0.116",
              "matchCriteriaId": "051BCE94-78FA-4820-B75F-4819080BCCC8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "10.1.0",
              "versionEndExcluding": "10.1.53",
              "matchCriteriaId": "D0914AD3-D9E6-470C-A858-64D0CFA3F733"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.0.0",
              "versionEndExcluding": "11.0.20",
              "matchCriteriaId": "1F39B82B-0E67-459D-8065-2C6EE7970D0D"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread/2c682qnlg2tv4o5knlggqbl9yc2gb5sn",
      "source": "[email protected]",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/04/09/20",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ]
    }
  ]
}