Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-admin-webapps | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-docs-webapp | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-el-3.0-api | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-jsp-2.3-api | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-lib | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-servlet-4.0-api | 1:9.0.120-2.el9_8 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | tomcat-webapps | 1:9.0.120-2.el9_8 |
Vulnerabilities 16
-
Critical 9.8CVE-2026-41293 Public exploit
Apache Tomcat: HTTP/2 request headers not validated
Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0-M1 through 10.0.27. Older, end of support versions may also …
-
Critical 9.8CVE-2026-43512 Public exploit
Apache Tomcat: Digest authenticator will authenticate any unknown user
DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from…
-
Critical 9.1CVE-2026-43515 Public exploit
Apache Tomcat: Security constraints not correctly applied
Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.11…
-
Critical 9.1
Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users ar…
-
Critical 9.1
Apache Tomcat: Logged effective web.xml is incomplete
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22,…
-
Critical 9.1
Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from …
-
Critical 9.1
Apache Tomcat: EncryptInterceptor requirements not clearly documented
Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.…
-
High 7.5
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affec…
-
High 7.5
Apache Tomcat: LockOutRealm treats user names as case-sensitive
Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 throu…
-
High 7.3
Apache Tomcat: WebSocket authentication header exposure
Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.2…
-
High 7.3
Apache Tomcat: Bad ornext processing in RewriteValve
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, …
-
Medium 6.5
Apache Tomcat: EncryptInterceptor not protected against replay attacks
Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.…
-
Medium 6.5
Apache Tomcat: Security constraints for default servlet ignored method
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of the constraint. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22…
-
Medium 6.1
Apache Tomcat: XSS in number guess example
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through …
-
Medium 5.3
Apache Tomcat: Fix for CVE-2025-66614 is incomplete
Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. This issue affects Apache Tomcat: from 11.0.15 through 11.0.19, from 10.1.50 through 10.1.52, from 9.0.113 through 9.0.115. Users are recommended to upgrade t…
-
Low 3.7
Apache Tomcat: AJP secret compared in non-constant time
Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 thr…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68660.json
-
report
https://access.redhat.com/security/cve/CVE-2026-32990
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-32990
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-32990
-
article
https://lists.apache.org/thread/1nl9zqft0ksqlhlkd3j4obyjz1ghoyn7
-
report
https://access.redhat.com/security/cve/CVE-2026-41284
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-41284
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-41284
-
article
https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc
-
report
https://access.redhat.com/security/cve/CVE-2026-41293
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-41293
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-41293
-
article
https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r
-
report
https://access.redhat.com/security/cve/CVE-2026-42498
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-42498
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-42498
-
article
https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb
-
report
https://access.redhat.com/security/cve/CVE-2026-43512
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-43512
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43512
-
article
https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73
-
report
https://access.redhat.com/security/cve/CVE-2026-43513
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-43513
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43513
-
article
https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp
-
report
https://access.redhat.com/security/cve/CVE-2026-43514
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-43514
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-43514