CVE-2026-66299

{
  "id": "CVE-2026-66299",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-28T15:17:50.210",
  "lastModified": "2026-10-24T13:10:00.147",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example.\n\nThis issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application are not affected by this issue.\n\nUsers are recommended to remove the examples web application or to upgrade to version 11.0.25, 10.1.58 or 9.0.121 (when released), which fix the issue."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Consumo de Recursos No Controlado en el ejemplo de chat WebSocket de Apache Tomcat.\n\nEste problema afecta a Apache Tomcat: desde 11.0.0-M20 hasta 11.0.24, desde 10.1.24 hasta 10.1.57, desde 9.0.89 hasta 9.0.120. Los usuarios que han seguido la guía de seguridad para eliminar la aplicación web de ejemplos no se ven afectados por este problema.\n\nSe recomienda a los usuarios que eliminen la aplicación web de ejemplos o que actualicen a la versión 11.0.25, 10.1.58 o 9.0.121 (cuando se publique), que solucionan el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Tomcat",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "11.0.0-M20",
              "lessThanOrEqual": "11.0.24",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "10.1.24",
              "lessThanOrEqual": "10.1.57",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "9.0.89",
              "lessThanOrEqual": "9.0.120",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThanOrEqual": "8.5.100",
              "versionType": "semver",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-28T17:39:48.240123Z",
          "id": "CVE-2026-66299",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "9.0.89",
              "versionEndExcluding": "9.0.121",
              "matchCriteriaId": "4B8784DF-337E-4955-B7B4-B352E17A51D3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "10.1.24",
              "versionEndExcluding": "10.1.58",
              "matchCriteriaId": "603322DF-B852-4112-A8E7-0447A122A894"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.0.1",
              "versionEndExcluding": "11.0.25",
              "matchCriteriaId": "DF30E912-1C80-4AEA-8C14-BB32B416EFEA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone20:*:*:*:*:*:*",
              "matchCriteriaId": "77BA6600-0890-4BA1-B447-EC1746BAB4FD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone21:*:*:*:*:*:*",
              "matchCriteriaId": "7914D26B-CBD6-4846-9BD3-403708D69319"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone22:*:*:*:*:*:*",
              "matchCriteriaId": "123C6285-03BE-49FC-B821-8BDB25D02863"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone23:*:*:*:*:*:*",
              "matchCriteriaId": "8A28C2E2-B7BC-46CE-94E4-AE3EF172AA47"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone24:*:*:*:*:*:*",
              "matchCriteriaId": "069B0D8E-8223-4C4E-A834-C6235D6C3450"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone25:*:*:*:*:*:*",
              "matchCriteriaId": "E6282085-5716-4874-B0B0-180ECDEE128F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:apache:tomcat:11.0.0:milestone26:*:*:*:*:*:*",
              "matchCriteriaId": "899B6FF0-8701-47E7-8EDA-428A6D48786D"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://lists.apache.org/thread/8owczcc1o8qw1rxmg9gvfk4w2jnh4l5k",
      "source": "[email protected]",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2026/07/28/25",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ]
    }
  ]
}