CVE-2026-86350

Critical

Not in the current index: no indexed chart deploys a container image carrying CVE-2026-86350 in its latest version. The tables below are over older indexed versions and charts no longer in the index, and this page is not offered to search engines.

Advisory

Published 1 Oct 2026In the index since 2 Oct 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 0; of 18,071 indexed, latest versions
Container images: 1; in older or deselected versions
Fix available: 1 of 1; affected package

Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

Carried by no container image the latest versions of the 18,071 indexed charts deploy; current on 1 image referenced by older indexed versions or by charts no longer in the index.