https://seclists.org/oss-sec/2026/q3/901: CVE-2026-77756: Apache Tomcat: Transfer-Encoding honod for HTTP/1.0 quests
Published Sep 23, 2026
·Updated
Affected Software
1 affected component
Apache Tomcat>=11.0.0-M1<=11.0.25, >=10.1.0-M1<=10.1.59, >=9.0.47<=9.0.121, >=8.5.67<=8.5.100
Frequently Asked Questions
1
Are Apache Tomcat 7 deployments affected?
Apache Tomcat versions through 7.0.109 are listed as unaffected.