Detections
Analytics
SCA: security update for org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina (GHSA-9xv2-5v5q-p794)
critical Tenable Self-Hosted Container Security Plugin ID 447535
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before
windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the
upper boundary of the replay window then that request is replayable once only while the associated
nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through
11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at
the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through
7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version
11.0.25, 10.1.58 or 9.0.121, which fix the issue. (CVE-2026-65905)
Solution
Update the org.apache.tomcat.embed:tomcat-embed-core library and its related packages to version 10.1.58 or later.See Also
Plugin Details
Severity: Critical
ID: 447535
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 9/3/2026
Updated: 9/3/2026
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 58.15
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-65905
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/26/2026
Vulnerability Publication Date: 8/20/2026
Reference Information
CVE: CVE-2026-65905
cwe: CWE-294