com.github.psi-probe:psi-probe-core (>=5.4.0, <=5.5.0), com.github.psi-probe:psi-probe-tomcat10 (>=5.4.0, <=5.5.0) +43 more potentially affected by CVE-2026-101356 via org.apache.tomcat:tomcat-coyote (>=10.1.55, <=10.1.60)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.55, =5.4.0, =5.4.0, =3.5.0, =10.1.55, =10.1.55, =10.1.55, =10.1.55, =10.1.60 - org.apache.tomee.bom:tomee-webprofile 10.2.0 - org.apache.tomee.maven:tomee-embedded-maven-plugin 10.2.0 - org.apache.tomee:apache-tomee 10.2.0 -...

com.github.psi-probe:psi-probe-tomcat11 (>=5.4.0, <=5.5.0), com.github.waffle:waffle-tomcat11 (3.7.0) +65 more potentially affected by CVE-2026-101356 via org.apache.tomcat:tomcat-coyote (>=11.0.22, <=11.0.26)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.22, =5.4.0, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - net.sf.michael-o.tomcat:tomcat110-authnz-spnego-ad 4.3.0 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 -...

com.github.psi-probe:psi-probe-core (>=4.6.0, <=4.7.0), com.github.psi-probe:psi-probe-tomcat9 (>=4.6.0, <=4.7.0) +24 more potentially affected by CVE-2026-101356 via org.apache.tomcat:tomcat-coyote (>=9.0.118, <=9.0.122)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.118, =4.6.0, =4.6.0, =3.0.120, =3.0.120, =3.0.120, =3.5.0, =9.0.118, =9.0.118, =9.0.118, =9.0.118, =8.0.36, =1.93.0, =1.2611.0 and more Source cves: CVE-2026-101356 Source advisory: MEND:CVE-2026-101356...

com.github.jspxnet:jspx-framework (>=6.79, <=6.84), com.github.psi-probe:psi-probe-core (>=4.3.0, <=4.7.0) +41 more potentially affected by CVE-2026-93446 via org.apache.tomcat:tomcat-coyote (>=9.0.90, <=9.0.122)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.90, =6.79, =4.3.0, =4.3.0, =3.5.0, =10.0.0, =3.0.96, =3.0.96, =3.0.96, =0.1.2, =3.0.0-beta-2, =3.6.0 - it.bstz:jsf-autoreload-tomcat 1.0.0 - net.sf.michael-o.tomcat:tomcat90-authnz-spnego-ad 4.3.0 - net.thevpc.nuts:nuts-tomcat-classloader...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), com.atomgraph:linkeddatahub (>=5.5.0, <=5.5.2) +99 more potentially affected by CVE-2026-93446 via org.apache.tomcat:tomcat-coyote (>=10.1.25, <=10.1.60)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.25, =2.0.7, =5.5.0, =1.0.0, =5.1.0, =5.1.0, =3.5.0, =20260429, =20260429, =2.11.1, =0.2.2, =3.0.0-beta-2, =3.6.0 and more Source cves: CVE-2026-93446 Source advisory: MEND:CVE-2026-93446...

com.github.psi-probe:psi-probe-tomcat11 (>=5.1.0, <=5.5.0), com.github.waffle:waffle-tomcat11 (>=3.5.0, <=3.7.0) +77 more potentially affected by CVE-2026-93446 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m21, <=11.0.26)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m21, =5.1.0, =3.5.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-93446 Source advisory: MEND:CVE-2026-93446...

com.github.jspxnet:jspx-framework (>=6.79, <=6.84), com.github.psi-probe:psi-probe-core (>=4.3.1, <=4.7.0) +40 more potentially affected by CVE-2026-88041 via org.apache.tomcat:tomcat-coyote (>=9.0.93, <=9.0.122)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.93, =6.79, =4.3.1, =4.3.1, =3.5.0, =10.0.0, =3.0.96, =3.0.96, =3.0.96, =0.1.2, =3.0.0-rc-1, =1.7.1, =1.7.2 and more Source cves: CVE-2026-88041 Source advisory: MEND:CVE-2026-88041...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), com.atomgraph:linkeddatahub (>=5.5.0, <=5.5.2) +95 more potentially affected by CVE-2026-88041 via org.apache.tomcat:tomcat-coyote (>=10.1.28, <=10.1.60)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.28, =2.0.7, =5.5.0, =1.0.0, =5.1.1, =5.1.1, =3.5.0, =20260429, =20260429, =2.12.0, =0.2.2, =3.0.0-rc-1, =3.6.0 and more Source cves: CVE-2026-88041 Source advisory: MEND:CVE-2026-88041...

com.github.psi-probe:psi-probe-tomcat11 (>=5.1.1, <=5.5.0), com.github.waffle:waffle-tomcat11 (>=3.5.0, <=3.7.0) +77 more potentially affected by CVE-2026-88041 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m24, <=11.0.26)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m24, =5.1.1, =3.5.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-88041 Source advisory: MEND:CVE-2026-88041...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (1.0-377-020cf9e) +137 more potentially affected by CVE-2026-80353 via org.apache.tomcat:tomcat-coyote (>=9.0.48, <=9.0.122)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.48, =3.0.11, =1.0.1, =1.7.0, =6.73, =3.5.5, =3.5.5, =3.1.0, =0.1.3, =1.7.2.230613, =1.8.3.240913 and more Source cves: CVE-2026-80353 Source advisory: MEND:CVE-2026-80353...

Rocky Linux 10.2 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_69259)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669259 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...

Rocky Linux 8 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_68677)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202668677 advisory. tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication CVE-2026-43512 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not...

Rocky Linux 10.2 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_68651)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202668651 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...

MiracleLinux 8 : tomcat-9.0.120-1.el8_10 (AXSA:2026-1899:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1899:08 advisory. tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication CVE-2026-43512 tomcat-coyote: Apache Tomcat: HTTP/2 request headers no...

com.github.psi-probe:psi-probe-core (5.4.0), com.github.psi-probe:psi-probe-tomcat10 (5.4.0) +41 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=10.1.55, <=10.1.59)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.55, =3.5.0, =10.1.55, =10.1.55, =10.1.55, =10.1.55, =10.1.59 - org.apache.tomee.bom:tomee-webprofile 10.2.0 - org.apache.tomee.maven:tomee-embedded-maven-plugin 10.2.0 - org.apache.tomee:apache-tomee 10.2.0 -...

com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.restx:restx-server-tomcat (1.3.0-rc2) +63 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=11.0.22, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.22, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - net.sf.michael-o.tomcat:tomcat110-authnz-spnego-ad 4.3.0 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 -...

com.github.psi-probe:psi-probe-core (4.6.0), com.github.psi-probe:psi-probe-tomcat9 (>=4.6.0, <=4.7.0) +22 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=9.0.118, <=9.0.121)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.118, =4.6.0, =3.0.120, =3.0.120, =3.0.120, =3.5.0, =9.0.118, =9.0.118, =9.0.118, =9.0.118, =8.0.36, =1.93.0, =1.93.0, =1.93.0, =1.2611.0 and more Source cves: CVE-2026-86350 Source advisory: MEND:CVE-2026-86350...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-86248 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.57)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.2.0 Source cves: CVE-2026-86248 Source advisory: MEND:CVE-2026-86248...

org.apache.tomee.bom:tomee-webprofile (11.0.0-m1) potentially affected by CVE-2026-86248 via org.apache.tomcat:tomcat-coyote-ffm (11.0.22)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version 11.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote-ffm and may be impacted: - org.apache.tomee.bom:tomee-webprofile 11.0.0-m1 Source cves: CVE-2026-86248 Source...

com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.github.yeamy:restlite-tomcat (1.0-rc12) +64 more potentially affected by CVE-2026-78437 via org.apache.tomcat:tomcat-coyote (>=11.0.20, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.20, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - net.sf.michael-o.tomcat:tomcat110-authnz-spnego-ad 4.3.0 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 -...