The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to cause service failures.

🗓️ 11 Jun 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Apache Tomcat vulnerability due to insufficient input validation that may cause service failures.

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat Server library (CVE-2026-41293, CVE-2026-24880) affect Power HMC.	1 Jul 202616:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	22 Jun 202613:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-11.0.20.jar	17 Jun 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Tomcat application server that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities.	16 Jun 202617:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DevOps Build.	29 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	25 Jun 202616:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise	29 Jun 202609:47	–	ibm
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1770)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2026-1776)	8 Jun 202600:00	–	nessus

Vulners

Node

red_hat jboss_web_serverMatch6

apache tomcatRange11.0.0-m1–11.0.21

apache tomcatRange10.1.0-m1–10.1.54

apache tomcatRange9.0.0.m1–9.0.117

canonical ubuntuMatch25.10

Source	Link
github	www.github.com/advisories/GHSA-r29c-68gh-xp6x
github	www.github.com/apache/tomcat/commit/f72a6174ab1f0f5a053435f80448b4f6837fe6d7
github	www.github.com/apache/tomcat/commit/19f17a257797e8d139b33ff9c88d362a273be148
tomcat	www.tomcat.apache.org/security-10.html
github	www.github.com/apache/tomcat
github	www.github.com/apache/tomcat/commit/1c70480466572c9192ed412ebefcd43fc63137fd
github	www.github.com/apache/tomcat/commit/cf9452443bcbf3b1a4b435ef7d624364f1b65ca3
github	www.github.com/apache/tomcat/commit/3915fd27e6810b14ccd21e3d900bd8faef44d3df
github	www.github.com/apache/tomcat/commit/e5cef9618c3f4fd31bd6fb1e83f0f18022280dac
github	www.github.com/apache/tomcat/commit/2a2476460e823789f530a22207873ea8cd6eff3b

11 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 39.8

CVSS 210

EPSS0.01339