Security update for tomcat11

This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CVE-2026-52759

creationtimestamp| type| source ---|---|--- 2026-06-10 15:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy3uedfc2f...

CVE-2026-47346

Backend users with file write permissions were able to upload form definition files with mixed-case extensions e.g., .FORM.YAML to bypass the Form Framework's upload restriction. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

USN-8417-1 tomcat9, tomcat10 vulnerabilities

It was discovered that Tomcat did not properly limit the size of WebDAV LOCK and PROPFIND request bodies. A remote attacker could use this issue to cause Tomcat to consume excessive memory, resulting in a denial of service. CVE-2026-41284 It was discovered that Tomcat incorrectly validated HTTP/2...

CVE-2026-47966

creationtimestamp| type| source ---|---|--- 2026-06-10 00:30:58+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnvhhs2aku26...

EulerOS 2.0 SP13 : cups (EulerOS-SA-2026-2282)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, an integer...

CVE-2026-24180

creationtimestamp| type| source ---|---|--- 2026-06-09 17:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuotjfmxk2p 2026-06-09 18:14:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116721479487661795...

CVE-2026-42916 NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2026-47346

Backend users with file write permissions were able to upload form definition files with mixed-case extensions e.g., .FORM.YAML to bypass the Form Framework's upload restriction. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

Exploit for CVE-2026-48595

CVE-2026-48595 - elixir-tesla tesla Vulnerability Quick Us...

CVE-2026-42535

creationtimestamp| type| source ---|---|--- 2026-06-09 11:12:57+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mnu2uq6ygc2l 2026-06-09 12:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25 2026-06-09 18:00:00+00:00| seen|...

CVE-2026-47346

Summary: CVE-2026-47346 affects TYPO3 CMS prior to certain patch versions, where backend users with file write perms can upload form definition files with mixed-case extensions (e.g., .FORM.YAML) to bypass upload restrictions. This can be exploited to execute arbitrary SQL statements and escalate...

CVE-2026-47346 TYPO3 CMS - Broken Access Control in Form Framework

Backend users with file write permissions were able to upload form definition files with mixed-case extensions e.g., .FORM.YAML to bypass the Form Framework's upload restriction. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

CVE-2026-47346 TYPO3 CMS - Broken Access Control in Form Framework

Backend users with file write permissions were able to upload form definition files with mixed-case extensions e.g., .FORM.YAML to bypass the Form Framework's upload restriction. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

CVE-2026-34033

creationtimestamp| type| source ---|---|--- 2026-06-09 07:32:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mntojwksmd2c...

CVE-2026-47346: Improper Handling of Case Sensitivity

Backend users with file write permissions were able to upload form definition files with mixed-case extensions e.g., .FORM.YAML to bypass the Form Framework's upload restriction. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

TYPO3 CMS 安全漏洞

TYPO3 CMS is a content management system developed under the TYPO3 open source framework. There is a security vulnerability in TYPO3 CMS, which stems from the upload limit imposed on form definition files. This limit can be bypassed by using mixed uppercase and lowercase file extensions, allowing...

CVE-2026-42536

creationtimestamp| type| source ---|---|--- 2026-06-08 22:00:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnsolmbovy2r 2026-06-08 23:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnsrxlori626 2026-06-09 00:51:01+00:00| seen|...

Important: tomcat9

Issue Overview: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are...