MGASA-2026-0376 Updated tomcat packages fix security vulnerabilities

🗓️ 04 Sep 2026 17:53:22Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Tomcat updated packages fix multiple vulnerabilities including security bypass and DoS.

Reporter	Title	Published	Views	Family All 766
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to multiple issues like improper Access control, Authentication Bypass, Improper Authorization and more due to the use of Apache-Tomcat .	22 Sep 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	9 Sep 202609:46	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:16	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	5 Oct 202608:14	–	ibm
IBM Security Bulletins	Security Bulletin: DEV-EXT - tomcat-embed-core-10.1.57.jar (Publicly disclosed vulnerability found by Scanner)	17 Sep 202620:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities	28 Sep 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to Improper Handling of URL Encoding and Insufficient Technical Documentation due to Apache Tomcat (CVE-2026-59083 & CVE-2026-59084)	29 Jul 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat (tomcat-embed-websocket) ‚Äî Insufficient Session Expiration via WebSocket	17 Sep 202620:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities were addressed in IBM DataStax Enterprise 6.9.25	16 Sep 202616:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects DB2 Dev Extension (CVE-2026-59083, CVE-2026-59084)	17 Sep 202619:50	–	ibm

Source	Link
advisories	www.advisories.mageia.org/MGASA-2026-0376.html
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2026/07/14/7
lists	www.lists.apache.org/thread/3g63zos2gkjo5vgnrk8kxmosv47w6wbq
openwall	www.openwall.com/lists/oss-security/2026/07/14/8
lists	www.lists.apache.org/thread/7w9746ootcxo0gvx26xjpw80l31f1qw7
openwall	www.openwall.com/lists/oss-security/2026/07/28/25
lists	www.lists.apache.org/thread/8owczcc1o8qw1rxmg9gvfk4w2jnh4l5k
openwall	www.openwall.com/lists/oss-security/2026/08/26/1
openwall	www.openwall.com/lists/oss-security/2026/08/26/2

04 Sep 2026 18:11Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.3 - 9.8

EPSS0.00745

SSVC

Tomcat security bypass denial of service HTTP/2 WebSocket access control multiple vulnerabilities