Security Bulletin: IBM Maximo Application Suite - Monitor Component uses tomcat-embed-core-10.1.54.jar which is vulnerable to CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.

Summary IBM Maximo Application Suite - Monitor Component uses tomcat-embed-core-10.1.54.jar which is vulnerable to CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-41293...

Security Bulletin: Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.

Summary Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux234x8664.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515. This bulletin contains information regarding the vulnerability and its...

Security update for tomcat11 (important)

openSUSE security update: security update for tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21121-1 Rating: important References: bsc1265145 bsc1265162 bsc1265163 bsc1265165 bsc1265166 bsc1265167 bsc1265168 Cross-References: CVE-2026-4128...

OPENSUSE-SU-2026:21117-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...

OPENSUSE-SU-2026:21122-1 Security update for tomcat10

This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

SUSE SLES12 Security Update : tomcat (SUSE-SU-2026:2299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2299-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handli...

Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...

tomcat10-10.1.55-1.1 on GA media (moderate)

tomcat10-10.1.55-1.1 on GA media Announcement ID: openSUSE-SU-2026:10926-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

tomcat11-11.0.22-1.1 on GA media (moderate)

tomcat11-11.0.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10927-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

CVE-2026-43512 vulnerabilities

Vulnerabilities for packages: nacos, kayenta-fips, ontop-fips, kayenta, camunda-zeebe, camunda, thingsboard, nacos-docker, ontop...

SUSE CVE-2026-43512

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0. Older unsupported...

Linux Distros Unpatched Vulnerability : CVE-2026-43512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through...

org.apache.openejb:apache-tomee (1.7.5), org.apache.openejb:arquillian-tomee-codi-tests (1.7.5) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (7.0.81)

org.apache.tomcat:tomcat MAVEN version 7.0.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.openejb:apache-tomee 1.7.5 - org.apache.openejb:arquillian-tomee-codi-tests 1.7.5 -...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.54), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.54)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-43512 Source advisory: OSV:GHSA-H6FC-48RJ-7QQH...

org.apache.tomee:apache-tomee (7.0.0), org.apache.tomee:arquillian-tomee-codi-tests (7.0.0) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.5.2)

org.apache.tomcat:tomcat MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee 7.0.0 - org.apache.tomee:arquillian-tomee-codi-tests 7.0.0 -...

org.apache.openejb:apache-tomee (1.7.4), org.apache.openejb:arquillian-tomee-codi-tests (1.7.4) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (7.0.68)

org.apache.tomcat:tomcat MAVEN version 7.0.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.openejb:apache-tomee 1.7.4 - org.apache.openejb:arquillian-tomee-codi-tests 1.7.4 -...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.117), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.117)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-43512 Source advisory: GHSA-H6FC-48RJ-7QQH...

org.apache.tomee:apache-tomee (>=7.0.7, <=7.1.2), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.7, <=7.1.2) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.5.50)

org.apache.tomcat:tomcat MAVEN version 8.5.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.0.7, =7.1.2 Source...

org.apache.tomee:apache-tomee (7.0.0-m1), org.apache.tomee:arquillian-tomee-codi-tests (7.0.0-m1) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.0.29)

org.apache.tomcat:tomcat MAVEN version 8.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee 7.0.0-m1 - org.apache.tomee:arquillian-tomee-codi-tests 7.0.0-m1 -...

org.apache.tomee:apache-tomee (>=7.0.0-m2, <=7.0.0-m3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0-m2, <=7.0.0-m3) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.0.32)

org.apache.tomcat:tomcat MAVEN version 8.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee =7.0.0-m2, =7.0.0-m2, =7.0.0-m2, =7.0.0-m2, =7.0.0-m2, =7.0.0-m2, =7.0.0-m2,...