ROOT-APP-MAVEN-CVE-2026-65182 CVE-2026-65182 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-65182 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: conductor, camunda-zeebe, nacos, thingsboard, ontop-fips, kayenta-fips, camunda, conductor-fips, nacos-docker, ontop, kayenta...

CVE-2026-65182

creationtimestamp| type| source ---|---|--- 2026-08-26 00:42:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2db2ktkirf4d 2026-08-26 12:30:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k 2026-08-27 16:00:05+00:00| seen|...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +70 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.24)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-65182 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19341499...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +70 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.24)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.120), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.120)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.1.1 Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.24), org.apache.tomee:apache-tomee (11.0.0-m1) +10 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.24)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =3.0.0, =3.0.0, =11.0.0, =11.1.3 Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.24), org.apache.tomee:apache-tomee (11.0.0-m1) +10 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.24)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =3.0.0, =3.0.0, =11.0.0, =11.1.3 Source cves: CVE-2026-65182 Source advisory: OSV:GHSA-GCX9-497G-6CP6...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13637 more potentially affected by CVE-2026-65182 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.120)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2026-65182 Source advisory: OSV:GHSA-GCX9-497G-6CP6...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.57), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.57)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.57), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.57)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-65182 Source advisory: OSV:GHSA-GCX9-497G-6CP6...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.1.4), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.1.4) +8 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.57)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =5.21.0, =5.20.0, =5.20.4 Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +211 more potentially affected by CVE-2026-65182 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.109)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.1.5 and more Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.29) +287 more potentially affected by CVE-2026-65182 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =1.0-beta-1, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2026-65182 Source advisory: GHSA-GCX9-497G-6CP6...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +9119 more potentially affected by CVE-2026-65182 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.57)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.1.3, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-65182 Source advisory: OSV:GHSA-GCX9-497G-6CP6...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2026-65182 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2026-65182 Source...