PoC Archive PoC Archive

tag

Cwe-601

Medium
Apache Tomcat LoadBalancerDrainingValve — Cross-System Open Redirect / Session Fixation (CVE-2026-25854)
CVE-2026-25854· Apache Tomcat (clustered, using LoadBalancerDrainingValve) patched