Security Bulletin: IBM Maximo Application Suite - Monitor Component uses tomcat-embed-core-10.1.54.jar which is vulnerable to CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.

Summary IBM Maximo Application Suite - Monitor Component uses tomcat-embed-core-10.1.54.jar which is vulnerable to CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-41293...

Security Bulletin: Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.

Summary Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux234x8664.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515. This bulletin contains information regarding the vulnerability and its...

Security update for tomcat11 (important)

openSUSE security update: security update for tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21121-1 Rating: important References: bsc1265145 bsc1265162 bsc1265163 bsc1265165 bsc1265166 bsc1265167 bsc1265168 Cross-References: CVE-2026-4128...

OPENSUSE-SU-2026:21122-1 Security update for tomcat10

This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

OPENSUSE-SU-2026:21117-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...

SUSE SLES12 Security Update : tomcat (SUSE-SU-2026:2299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2299-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handli...

Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...

TencentOS Server 4: tomcat (TSSA-2026:0337)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0337 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

tomcat10-10.1.55-1.1 on GA media (moderate)

tomcat10-10.1.55-1.1 on GA media Announcement ID: openSUSE-SU-2026:10926-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

tomcat11-11.0.22-1.1 on GA media (moderate)

tomcat11-11.0.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10927-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

CVE-2026-43515 vulnerabilities

Vulnerabilities for packages: kayenta, thingsboard, ontop, kayenta-fips, ontop-fips, nacos-docker, camunda-zeebe, camunda...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc10) potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.0-rc10 Source cves:...

com.aceql:aceql-http (>=1.0-beta-1, <=1.0-beta-2), com.soento.framework:framework-web (0.0.1) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.77)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.77 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aceql:aceql-http =1.0-beta-1, =1.0-beta-2 -...

ch.rasc:embeddedtc (1.2), com.bsb.common.vaadin:com.bsb.common.vaadin.embed (0.5) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.32)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.2 - com.bsb.common.vaadin:com.bsb.common.vaadin.embed 0...

ch.rasc:embeddedtc (1.23), ch.rasc:embeddedtc-maven-plugin (1.18) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.65)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.23 - ch.rasc:embeddedtc-maven-plugin 1.18 -...

org.apache.tomee:apache-tomee (7.0.1), org.apache.tomee:arquillian-tomee-codi-tests (7.0.1) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat (8.5.3)

org.apache.tomcat:tomcat MAVEN version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.tomee:apache-tomee 7.0.1 - org.apache.tomee:arquillian-tomee-codi-tests 7.0.1 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.12) potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.12 Source cves: CVE-2026-435...

com.github.jsimone:webapp-runner (8.5.41.0), com.github.jsimone:webapp-runner-main (8.5.41.0) +11 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.5.41.0 -...

com.aceql:aceql-http (3.1), com.baidubce.formula:consul-config-spring-boot-starter (>=1.4.0.1, <=2.1.1.1) +135 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.35)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aceql:aceql-http 3.1 -...

org.apache.tomcat:tomcat-catalina-ha (8.0.42), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.42) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.42)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.42 - org.apache.tomcat:tomcat-catalina-jmx-remote...