Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2026-25854 — Original security research and proof-of-concept for CVE-2026-25854, an open redirect vulnerability in Apache Tomcat cluster configurations, including technical analysis and reproduction steps. | Kitploit
Tools/GitHubGitHub/gregk4sec/cve-2026-25854
Vulnerability AnalysisExploitationWeb Application ExploitationPapers & Research
GitHubgregk4sec/cve-2026-25854

cve-2026-25854

Original security research and proof-of-concept for CVE-2026-25854, an open redirect vulnerability in Apache Tomcat cluster configurations, including technical analysis and reproduction steps.

View Repository
25 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Type: CVE Discoverer: gregk4sec Research: Original Status: Public

CVE-2026-25854 — Occasionally open redirect

Discoverer: gregk4sec (https://github.com/gregk4sec/cve)
Discovery Date: 2026-01-30
Affected Vendor: Apache
Affected Product: Tomcat 11.0.x / 10.1.x / 9.x
Severity: 6.1 Medium
CWE: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Status: Under Review / Fixed / Private / Public ✅

Summary

When a Tomcat node in a cluster with the LoadBalancerDrainingValve was in the disabled (draining) state, a specially crafted URL could be used to trigger a redirect to a URI of the attackers choice.

Technical Analysis

See:

analysis.md

Reproduction Steps

  1. Environment setup
  2. Trigger conditions
  3. Expected vs actual behavior
  4. Screenshots (optional)

Proof of Concept (PoC)

PoC files are located in:

root@kitploit:~
./poc/

Note: Some PoC content may be redacted or published later depending on disclosure requirements.

Disclosure Timeline

See: timeline.md

Vendor Response

See: ./vendor-response/

References

  • CVE Entry: https://nvd.nist.gov/vuln/detail/CVE-2026-25854
  • Vendor Advisory: https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0
  • Security Bulletin: https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20
  • Related Research:

Attribution

This vulnerability is an original discovery by gregk4sec (https://github.com/gregk4sec/cve).
Repository: https://github.com/gregk4sec/cve

Download Tool