Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache TomcatApache Tomcat: EncryptInterceptor requirements not clearly documented

Risk 70
Severity
9.1
First published (updated )
CVE-2026-59084

Apache TomcatApache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

Risk 70
Severity
9.1
First published (updated )
CVE-2026-59083

Apache TomcatImproper Authorization vulnerability in Apache Tomcat leads to security constraints specified for th…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2494676

Apache TomcatApache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

Risk 54
Severity
7.3
First published (updated )
CVE-2026-55957

Apache TomcatApache Tomcat: Security constraints for default servlet ignored method

Risk 42
Severity
6.5
Trending
Month
First published (updated )
CVE-2026-55956
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: EncryptInterceptor not protected against replay attacks

Risk 42
Severity
6.5
First published (updated )
CVE-2026-55955

Apache TomcatApache Tomcat: Logged effective web.xml is incomplete

Risk 70
Severity
9.1
First published (updated )
CVE-2026-55276

Apache TomcatApache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector

Risk 70
Severity
9.1
First published (updated )
CVE-2026-53434

Apache TomcatApache Tomcat: Bad ornext processing in RewriteValve

Risk 54
Severity
7.3
Trending
Month
First published (updated )
CVE-2026-53404

oss-secCVE-2026-50229: Apache Tomcat: XSS in number guess example

First published (updated )
https://seclists.org/oss-sec/2026/q2/1069
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: XSS in number guess example

Risk 40
Severity
6.1
First published (updated )
CVE-2026-50229

Apache TomcatImproper Authorization vulnerability when multiple method constraints define an HTTP method for the …

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476519

Apache TomcatImproper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue af…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476520

Apache TomcatExposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerabi…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476516

Apache TomcatAllocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue aff…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2476518
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatInput Validation

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476513

Apache TomcatDEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. T…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2476511

Apache TomcatObservable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue …

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2476512

oss-secCVE-2026-43515: Apache Tomcat: Security constraints not corctly applied

First published (updated )
https://seclists.org/oss-sec/2026/q2/498

Apache TomcatApache Tomcat: Security constraints not correctly applied

Risk 71
Severity
9.1
First published (updated )
CVE-2026-43515
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2026-43514: Apache Tomcat: AJP sect compad in non-constant time

First published (updated )
https://seclists.org/oss-sec/2026/q2/497

Apache TomcatApache Tomcat: AJP secret compared in non-constant time

Risk 22
Severity
3.7
First published (updated )
CVE-2026-43514

oss-secCVE-2026-43513: Apache Tomcat: LockOutalm tats user names as case-sensitive

First published (updated )
https://seclists.org/oss-sec/2026/q2/496

Apache TomcatApache Tomcat: LockOutRealm treats user names as case-sensitive

Risk 46
Severity
7.5
First published (updated )
CVE-2026-43513

oss-secCVE-2026-43512: Apache Tomcat: Digest authenticator will authenticate any unknown user

First published (updated )
https://seclists.org/oss-sec/2026/q2/495
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: Digest authenticator will authenticate any unknown user

Risk 92
Severity
9.8
First published (updated )
CVE-2026-43512

Apache TomcatApache Tomcat: HTTP/2 request headers not validated

Risk 92
Severity
9.8
First published (updated )
CVE-2026-41293

Apache TomcatApache Tomcat: WebSocket authentication header exposure

Risk 55
Severity
7.3
First published (updated )
CVE-2026-42498

oss-secCVE-2026-41284: Apache Tomcat: Unbounded ad in WebDAV LOCK and PROPFIND handling

First published (updated )
https://seclists.org/oss-sec/2026/q2/499

Apache TomcatApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Risk 46
Severity
7.5
First published (updated )
CVE-2026-41284
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203