Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jun 17, 2026 · NIST NVD

   Updated

   Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

2. Oct 15, 2026 · Apache Software Foundation

   Detected

   Named on the public Apache Software Foundation page.

Affected

• cpe apache/tomcatversion unspecified

Sources

• Apache Software FoundationVendor advisoryCVE-2026-41284

  Named on the public Apache Software Foundation page.

  tomcat.apache.org
• CVE.orgVulnerability recordCVE-2026-41284

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-41284

  Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are reco

  nvd.nist.gov

References

• Mailing List · openwall.com
• Mailing List · lists.apache.org