Critical Vulnerability Discovered in Apache Tomcat, Immediate Patch Recommended

The Cyber Security Agency of Singapore (CSA) has issued an alert regarding a critical vulnerability (CVE-2026-65182) in Apache Tomcat versions 11.0.0-M1 through 11.0.24, 10.1.0-M1 through 10.1.57, and 9.0.0.M1 through 9.0.120. This flaw could allow unauthenticated attackers to bypass security restrictions and gain unauthorized access to protected resources, with a CVSS v3.1 score of 9.1. Users and administrators are urged to update immediately.