#tomcat

Tomcat WebSocket security constraints can be bypassed

CVE-2026-76183 lets attackers sidestep authentication rules on WebSocket endpoints across long-supported Tomcat lines.