Home › CVE Intelligence › CVE-2026-66299
CVSS 9.8 CRITICAL Vulnerability

CVE-2026-66299: Apache Tomcat: DoS via WebSocket chat example

Posted by Mark Thomas on Jul 28 Severity: low Affected versions: Apache Tomcat 11.0.0-M20 through 11.0.24 Apache Tomcat 10.1.24 through 10.1.57 Apache Tomcat 9.0.89 through 9.0.120 Apache Tomcat through 8.5.100 unaffect…

9.8CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-66299
VendorMultiple Vendors
Affected ProductMultiple Products
Vulnerability TypeVulnerability
CVSS Score9.8 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Posted by Mark Thomas on Jul 28 Severity: low

Affected versions:

• Apache Tomcat 11.0.0-M20 through 11.0.24
• Apache Tomcat 10.1.24 through 10.1.57
• Apache Tomcat 9.0.89 through 9.0.120
• Apache Tomcat through 8.5.100 unaffected

Description:

Uncontrolled Resource ... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-66299 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence