SUSE CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

EUVD-2026-66127

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

DEBIAN-CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

CVE-2026-65637

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

CVE-2026-65637: Improper Input Validation

Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...

PT-2026-81878

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.20 through 11.0.24 Apache Tomcat versions 10.1.53 through 10.1.57 Apache Tomcat versions 9.0.115 through 9.0.120 Description Improper input validation occurs due to an incomplete fix for a previous issue...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 6.2.2 (RHSA-2026:12194)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:12194 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...

Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

Security update for tomcat10

This update for tomcat10 fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

SUSE-SU-2026:1572-1 Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks...

OPENSUSE-SU-2026:20595-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.50, <=10.1.52), org.apache.tomee:apache-tomee (10.1.4) +8 more potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=10.1.50, <=10.1.52)

org.apache.tomcat:tomcat MAVEN version =10.1.50, =10.1.50, =1.2.0, =1.3.0 - org.eximeebpms.bpm.tomcat:eximeebpms-tomcat-assembly 1.2.0 Source cves: CVE-2026-32990 Source advisory: OSV:GHSA-8MC5-53M5-3QJ2...

com.github.waffle:waffle-tomcat9 (3.6.0), io.ktor:ktor-server-tomcat-jvm (>=3.4.0, <=3.4.3) +19 more potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat-coyote (>=9.0.113, <=9.0.115)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.113, =3.4.0, =9.0.113, =9.0.113, =9.0.113, =9.0.113, =1.89.0, =1.89.0, =1.89.0, =1.89.0, =1.89.0, =1.89.0, =1.90.0 and more Source cves: CVE-2026-32990 Source advisory: OSV:GHSA-8MC5-53M5-3QJ2...

com.github.waffle:waffle-tomcat11 (3.6.0), io.github.yeamy:restlite-tomcat (1.0-rc10) +16 more potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat-coyote (>=11.0.15, <=11.0.18)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.15, =1.0.33, =1.0.33, =1.0.33, =1.0.33, =1.0.33, =1.0.33, =11.0.15, =11.0.15, =11.0.15, =11.0.15, =7.3.3, =10.0.0, =1.1.0, =2.0.0 and more Source cves: CVE-2026-32990 Source advisory: GHSA-8MC5-53M5-3QJ2...

ai.telosforge:kimaira-starter-dms (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-web-security (>=1.2.4, <=1.2.6) +1494 more potentially affected by CVE-2026-32990 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.50, <=10.1.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.50, =1.2.4, =1.2.4, =1.30.0, =chart-0.3.0, =1.0.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.27.0 and more Source cves: CVE-2026-32990 Source advisory:...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.6.0) +776 more potentially affected by CVE-2026-32990 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.15, <=11.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.15, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.7.5 and more Source cves: CVE-2026-32990 Source advisory: OSV:GHSA-8MC5-53M5-3QJ2...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.6.0) +776 more potentially affected by CVE-2026-32990 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.15, <=11.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.15, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.7.5 and more Source cves: CVE-2026-32990 Source advisory: GHSA-8MC5-53M5-3QJ2...

com.github.waffle:waffle-tomcat11 (3.6.0), io.github.yeamy:restlite-tomcat (1.0-rc10) +16 more potentially affected by CVE-2025-66614 +1 more via org.apache.tomcat:tomcat-coyote (>=11.0.15, <=11.0.18)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.15, =1.0.33, =1.0.33, =1.0.33, =1.0.33, =1.0.33, =1.0.33, =11.0.15, =11.0.15, =11.0.15, =11.0.15, =7.3.3, =10.0.0, =1.1.0, =2.0.0 and more Source cves: CVE-2025-66614, CVE-2026-32990 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15990996...