Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apache TomcatApache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

Risk 54
Severity
7.3
First published (updated )
CVE-2026-55957

Apache TomcatApache Tomcat: Bad ornext processing in RewriteValve

Risk 54
Severity
7.3
Trending
Month
First published (updated )
CVE-2026-53404

Apache TomcatAllocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue aff…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2476518

Apache TomcatApache Tomcat: LockOutRealm treats user names as case-sensitive

Risk 46
Severity
7.5
First published (updated )
CVE-2026-43513

Apache TomcatApache Tomcat: WebSocket authentication header exposure

Risk 55
Severity
7.3
First published (updated )
CVE-2026-42498
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Risk 46
Severity
7.5
First published (updated )
CVE-2026-41284

Apache TomcatPadding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2457020

Apache TomcatMissing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-2914…

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2457027

Apache TomcatApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34487

Apache TomcatApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34486
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: Incomplete escaping of JSON access logs

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34483

Apache TomcatApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

Risk 46
Severity
7.5
First published (updated )
CVE-2026-29146

Apache TomcatApache Tomcat: TLS cipher order is not preserved

Risk 46
Severity
7.5
First published (updated )
CVE-2026-29129

Apache TomcatApache Tomcat: Request smuggling via invalid chunk extension

Risk 46
Severity
7.5
First published (updated )
CVE-2026-24880

Apache Tomcat NativeInput Validation

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2440426
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Risk 31
Severity
7.5
EPSS
0.02%
First published (updated )
CVE-2026-24734

Apache TomcatPath Traversal

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2406591

Apache TomcatApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled

Risk 76
Severity
7.5
First published (updated )
CVE-2025-55752

Apache TomcatApache Tomcat: DoS via excessive h2 streams at connection start

Risk 47
Severity
7.5
First published (updated )
CVE-2025-53506

Apache TomcatApache Tomcat: DoS via integer overflow in multipart file upload

Risk 47
Severity
7.5
First published (updated )
CVE-2025-52520
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: h2 DoS - Made You Reset

Risk 48
Severity
7.5
First published (updated )
CVE-2025-48989

Apache TomcatApache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows

Risk 79
Severity
8.4
First published (updated )
CVE-2025-49124

maven/org.apache.tomcat.embed:tomcat-embed-coreApache Tomcat: Security constraint bypass for pre/post-resources

Risk 47
Severity
7.5
First published (updated )
CVE-2025-49125

maven/org.apache.tomcat.embed:tomcat-embed-coreApache Tomcat: FileUpload large number of parts with headers DoS

Risk 47
Severity
7.5
First published (updated )
CVE-2025-48988

Apache TomcatApache Tomcat: Security constraint bypass for CGI scripts

Risk 55
Severity
7.3
First published (updated )
CVE-2025-46701
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatInput Validation

Risk 33
Severity
7
First published (updated )
REDHAT-BUG-2362783

Apache TomcatApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

Risk 65
Severity
7.5
Exploited
First published (updated )
CVE-2025-31650

Apache TomcatApache Tomcat: Denial of Service

Risk 53
Severity
8.6
First published (updated )
CVE-2024-38286

Apache TomcatApache Tomcat: HTTP/2 excess header handling DoS

Risk 46
Severity
7.5
First published (updated )
CVE-2024-34750

Apache TomcatApache Tomcat: HTTP/2 header handling DoS

Risk 32
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-24549
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203