Поиск уязвимостей
Количество 17
Количество 17
CVE-2026-87022
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue.
CVE-2026-87022
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue.
CVE-2026-87022
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue.
CVE-2026-87022
Improper handling of length parameter inconsistency vulnerability in A ...
ROS-20261027-80-0050
Уязвимость tomcat11
ROS-20261027-80-0049
Уязвимость tomcat10
ROS-20261027-80-0048
Уязвимость tomcat
ROS-20261027-73-0053
Уязвимость tomcat11
ROS-20261027-73-0052
Уязвимость tomcat10
ROS-20261027-73-0051
Уязвимость tomcat
GHSA-xwrc-v28h-528j
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue.
ALT-PU-2026-16757
ALT-PU-2026-16757: package `tomcat10` update to version 10.1.60-alt0.p11.1
openSUSE-SU-2026:21984-1
Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11
SUSE-SU-2026:4546-1
Security update for libtcnative-1-0, tomcat, tomcat10
SUSE-SU-2026:4544-1
Security update for libtcnative-1-0, tomcat11
SUSE-SU-2026:4927-1
Security update for libapr1, libtcnative-1-0, tomcat
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-87022 Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-87022 Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue. | CVSS3: 6.5 | 1% Низкий | около 2 месяцев назад |
 | CVE-2026-87022 Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| CVE-2026-87022 Improper handling of length parameter inconsistency vulnerability in A ... | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
 | ROS-20261027-80-0050 Уязвимость tomcat11 | CVSS3: 7.5 | 1% Низкий | 17 дней назад |
| ROS-20261027-80-0049 Уязвимость tomcat10 | CVSS3: 7.5 | 1% Низкий | 17 дней назад |
| ROS-20261027-80-0048 Уязвимость tomcat | CVSS3: 7.5 | 1% Низкий | 17 дней назад |
| ROS-20261027-73-0053 Уязвимость tomcat11 | CVSS3: 7.5 | 1% Низкий | 17 дней назад |
| ROS-20261027-73-0052 Уязвимость tomcat10 | CVSS3: 7.5 | 1% Низкий | 17 дней назад |
| ROS-20261027-73-0051 Уязвимость tomcat | CVSS3: 7.5 | 1% Низкий | 17 дней назад |
| GHSA-xwrc-v28h-528j Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue. | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| ALT-PU-2026-16757 ALT-PU-2026-16757: package `tomcat10` update to version 10.1.60-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
 | openSUSE-SU-2026:21984-1 Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 | около 1 месяца назад | ||
| SUSE-SU-2026:4546-1 Security update for libtcnative-1-0, tomcat, tomcat10 | около 1 месяца назад | ||
| SUSE-SU-2026:4544-1 Security update for libtcnative-1-0, tomcat11 | около 1 месяца назад | ||
| SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat | 15 дней назад | ||
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 21 день назад |
Уязвимостей на страницу