Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 19

Количество 19

github логотип

GHSA-mqg3-r7h5-24x4

3 месяца назад

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 9.1
EPSS: Низкий
ubuntu логотип

CVE-2026-55276

3 месяца назад

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 9.1
EPSS: Низкий
redhat логотип

CVE-2026-55276

3 месяца назад

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 2.3
EPSS: Низкий
nvd логотип

CVE-2026-55276

3 месяца назад

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2026-55276

3 месяца назад

Always-Incorrect Control Flow Implementation vulnerability in Apache T ...

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20260819-80-0058

26 дней назад

Уязвимость tomcat11

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20260819-80-0057

26 дней назад

Уязвимость tomcat10

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20260819-80-0056

26 дней назад

Уязвимость tomcat

CVSS3: 9.1
EPSS: Низкий
fstec логотип

BDU:2026-11858

3 месяца назад

Уязвимость сервера приложений Apache Tomcat, связанная с реализацией некорректного потока управления, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20260819-73-0058

26 дней назад

Уязвимость tomcat11

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20260819-73-0057

26 дней назад

Уязвимость tomcat10

CVSS3: 9.1
EPSS: Низкий
redos логотип

ROS-20260819-73-0056

26 дней назад

Уязвимость tomcat

CVSS3: 9.1
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21329-1

2 месяца назад

Security update for tomcat11

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21328-1

2 месяца назад

Security update for tomcat10

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21327-1

2 месяца назад

Security update for tomcat

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3167-1

около 2 месяцев назад

Security update for tomcat

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3112-1

около 2 месяцев назад

Security update for tomcat10

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3088-1

около 2 месяцев назад

Security update for tomcat

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3087-1

около 2 месяцев назад

Security update for tomcat11

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-mqg3-r7h5-24x4

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 9.1
1%
Низкий
3 месяца назад
ubuntu логотип
CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 9.1
1%
Низкий
3 месяца назад
redhat логотип
CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 2.3
1%
Низкий
3 месяца назад
nvd логотип
CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.

CVSS3: 9.1
1%
Низкий
3 месяца назад
debian логотип
CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache T ...

CVSS3: 9.1
1%
Низкий
3 месяца назад
redos логотип
ROS-20260819-80-0058

Уязвимость tomcat11

CVSS3: 9.1
1%
Низкий
26 дней назад
redos логотип
ROS-20260819-80-0057

Уязвимость tomcat10

CVSS3: 9.1
1%
Низкий
26 дней назад
redos логотип
ROS-20260819-80-0056

Уязвимость tomcat

CVSS3: 9.1
1%
Низкий
26 дней назад
fstec логотип
BDU:2026-11858

Уязвимость сервера приложений Apache Tomcat, связанная с реализацией некорректного потока управления, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 9.1
1%
Низкий
3 месяца назад
redos логотип
ROS-20260819-73-0058

Уязвимость tomcat11

CVSS3: 9.1
1%
Низкий
26 дней назад
redos логотип
ROS-20260819-73-0057

Уязвимость tomcat10

CVSS3: 9.1
1%
Низкий
26 дней назад
redos логотип
ROS-20260819-73-0056

Уязвимость tomcat

CVSS3: 9.1
1%
Низкий
26 дней назад
suse-cvrf логотип
openSUSE-SU-2026:21329-1

Security update for tomcat11

2 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21328-1

Security update for tomcat10

2 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21327-1

Security update for tomcat

2 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3167-1

Security update for tomcat

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3112-1

Security update for tomcat10

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3088-1

Security update for tomcat

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3087-1

Security update for tomcat11

около 2 месяцев назад

Уязвимостей на страницу