CVE-2026-50229: Apache Tomcat: XSS in number guess example

Analysis on rafaelpfister.ch

Article · October 31, 2026 totemomail 9.5.1: Account takeover in the Web Portal and SSRF via incoming email fixed totemomail 9.5.1 fixes eight security vulnerabilities and brings totemomail in line with the Kiteworks advisories for Email Protection Gateway published at the end of September. Two vulnerabilities can be exploited without authentication: a flaw in the Web Portal password reset process that allows administrator accounts to be taken over, and server-side retrieval of URLs from incoming messages. The release also includes path traversal fixes in the Admin API and Mail API, as well as updated Tomcat and Batik libraries.

Vendor description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.

Reference data

Vendor

Apache Software Foundation

Affected products

Apache Tomcat

CVSS 3.1

6.1 (MEDIUM)

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness type

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Published

June 29, 2026

Official sources

← All vulnerabilities

CVE-2026-50229 Apache Tomcat: XSS in number guess example

Analysis on rafaelpfister.ch

Vendor description

Reference data

Official sources

Subscribe