Rocky Linux 10.2 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_68651)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202668651 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...

Rocky Linux 10.2 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_69259)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669259 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...

Rocky Linux 8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_68677)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202668677 advisory. tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication CVE-2026-43512 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not...

MiracleLinux 8 : tomcat-9.0.120-1.el8_10 (AXSA:2026-1899:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1899:08 advisory. tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication CVE-2026-43512 tomcat-coyote: Apache Tomcat: HTTP/2 request headers no...

com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.restx:restx-server-tomcat (1.3.0-rc2) +62 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=11.0.22, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.22, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 - org.apache.meecrowave:meecrowave-core 2.1.1 -...

com.github.psi-probe:psi-probe-core (5.4.0), com.github.psi-probe:psi-probe-tomcat10 (5.4.0) +41 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=10.1.55, <=10.1.59)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.55, =3.5.0, =10.1.55, =10.1.55, =10.1.55, =10.1.55, =10.1.59 - org.apache.tomee.bom:tomee-webprofile 10.2.0 - org.apache.tomee.maven:tomee-embedded-maven-plugin 10.2.0 - org.apache.tomee:apache-tomee 10.2.0 -...

com.github.psi-probe:psi-probe-core (4.6.0), com.github.psi-probe:psi-probe-tomcat9 (>=4.6.0, <=4.7.0) +22 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=9.0.118, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.118, =4.6.0, =3.0.120, =3.0.120, =3.0.120, =3.5.0, =9.0.118, =9.0.118, =9.0.118, =9.0.118, =8.0.36, =1.93.0, =1.93.0, =1.93.0, =1.2610.0 and more Source cves: CVE-2026-86350 Source advisory: MEND:CVE-2026-86350...

org.apache.tomee.bom:tomee-webprofile (11.0.0-m1) potentially affected by CVE-2026-86248 via org.apache.tomcat:tomcat-coyote-ffm (11.0.22)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version 11.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote-ffm and may be impacted: - org.apache.tomee.bom:tomee-webprofile 11.0.0-m1 Source cves: CVE-2026-86248 Source...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-86248 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.57)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.2.0 Source cves: CVE-2026-86248 Source advisory: MEND:CVE-2026-86248...

com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.github.yeamy:restlite-tomcat (1.0-rc12) +63 more potentially affected by CVE-2026-78437 via org.apache.tomcat:tomcat-coyote (>=11.0.20, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.20, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 - org.apache.meecrowave:meecrowave-core 2.1.1 -...

com.github.psi-probe:psi-probe-core (5.4.0), com.github.psi-probe:psi-probe-tomcat10 (5.4.0) +41 more potentially affected by CVE-2026-78437 via org.apache.tomcat:tomcat-coyote (>=10.1.53, <=10.1.59)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.53, =3.0.1, =3.5.0, =4.1.0, =10.1.53, =10.1.53, =10.1.53, =10.1.53, =10.1.5, =10.1.5, =10.1.5, =10.1.5, =10.1.5, =10.1.5, =10.2.0 and more Source cves: CVE-2026-78437 Source advisory: MEND:CVE-2026-78437...

com.github.jspxnet:jspx-framework (6.84), com.github.psi-probe:psi-probe-core (4.6.0) +23 more potentially affected by CVE-2026-78437 via org.apache.tomcat:tomcat-coyote (>=9.0.116, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.116, =4.6.0, =3.0.120, =3.0.120, =3.0.120, =3.5.0, =9.0.116, =9.0.116, =9.0.116, =9.0.116, =8.0.36, =1.91.0, =1.91.0, =1.2610.0 and more Source cves: CVE-2026-78437 Source advisory: MEND:CVE-2026-78437...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +76 more potentially affected by CVE-2026-78383 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-78383 Source advisory: MEND:CVE-2026-78383...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +120 more potentially affected by CVE-2026-78383 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.59)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =3.1.0 - io.github.microsphere-projects:microsphere-spring-cloud-gateway 0.2.0 and more Source cves: CVE-2026-78383 Source advisory: MEND:CVE-2026-78383...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +191 more potentially affected by CVE-2026-78383 via org.apache.tomcat:tomcat-coyote (>=9.0.0.m1, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.0.m1, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =2.6.0, =3.2.1036, =1.0.1, =1.3.1, =6.35, =3.1.0, =4.6.0 and more Source cves: CVE-2026-78383 Source advisory: MEND:CVE-2026-78383...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +76 more potentially affected by CVE-2026-77762 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-77762 Source advisory: MEND:CVE-2026-77762...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +120 more potentially affected by CVE-2026-77762 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.59)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =3.1.0 - io.github.microsphere-projects:microsphere-spring-cloud-gateway 0.2.0 and more Source cves: CVE-2026-77762 Source advisory: MEND:CVE-2026-77762...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +142 more potentially affected by CVE-2026-77762 via org.apache.tomcat:tomcat-coyote (>=9.0.39, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.39, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =3.3.7, =1.0.1, =1.7.0, =6.35, =3.5.3, =3.5.3, =3.0.0, =0.1.1, =0.1.4 and more Source cves: CVE-2026-77762 Source advisory: MEND:CVE-2026-77762...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +76 more potentially affected by CVE-2026-77756 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-77756 Source advisory: MEND:CVE-2026-77756...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +120 more potentially affected by CVE-2026-77756 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.59)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =3.1.0 - io.github.microsphere-projects:microsphere-spring-cloud-gateway 0.2.0 and more Source cves: CVE-2026-77756 Source advisory: MEND:CVE-2026-77756...