Поиск уязвимостей
Количество 26
Количество 26
BDU:2026-11859
Уязвимость механизма перезаписи (RewriteValve) сервера приложений Apache Tomcat, позволяющая нарушителю обойти ограничения контроля доступа
ROS-20260819-73-0052
Уязвимость tomcat11
ROS-20260819-73-0051
Уязвимость tomcat10
ROS-20260819-73-0050
Уязвимость tomcat
ALT-PU-2026-10792
ALT-PU-2026-10792: package `tomcat10` update to version 10.1.56-alt0.p11.1
CVE-2026-53404
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.
CVE-2026-53404
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.
CVE-2026-53404
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.
CVE-2026-53404
Always-Incorrect Control Flow Implementation vulnerability in Apache T ...
ROS-20260819-80-0052
Уязвимость tomcat11
ROS-20260819-80-0051
Уязвимость tomcat10
ROS-20260819-80-0050
Уязвимость tomcat
GHSA-h792-v28v-ppgr
Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
openSUSE-SU-2026:21329-1
Security update for tomcat11
openSUSE-SU-2026:21328-1
Security update for tomcat10
openSUSE-SU-2026:21327-1
Security update for tomcat
SUSE-SU-2026:3167-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-11859 Уязвимость механизма перезаписи (RewriteValve) сервера приложений Apache Tomcat, позволяющая нарушителю обойти ограничения контроля доступа | CVSS3: 7.3 | 1% Низкий | 4 месяца назад |
 | ROS-20260819-73-0052 Уязвимость tomcat11 | CVSS3: 7.3 | 1% Низкий | 3 месяца назад |
| ROS-20260819-73-0051 Уязвимость tomcat10 | CVSS3: 7.3 | 1% Низкий | 3 месяца назад |
| ROS-20260819-73-0050 Уязвимость tomcat | CVSS3: 7.3 | 1% Низкий | 3 месяца назад |
| ALT-PU-2026-10792 ALT-PU-2026-10792: package `tomcat10` update to version 10.1.56-alt0.p11.1 | CVSS3: 9.1 | 4 месяца назад | |
 | CVE-2026-53404 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue. | CVSS3: 7.3 | 1% Низкий | 4 месяца назад |
 | CVE-2026-53404 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue. | CVSS3: 6.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-53404 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue. | CVSS3: 7.3 | 1% Низкий | 4 месяца назад |
| CVE-2026-53404 Always-Incorrect Control Flow Implementation vulnerability in Apache T ... | CVSS3: 7.3 | 1% Низкий | 4 месяца назад |
| ROS-20260819-80-0052 Уязвимость tomcat11 | CVSS3: 7.3 | 1% Низкий | 3 месяца назад |
| ROS-20260819-80-0051 Уязвимость tomcat10 | CVSS3: 7.3 | 1% Низкий | 3 месяца назад |
| ROS-20260819-80-0050 Уязвимость tomcat | CVSS3: 7.3 | 1% Низкий | 3 месяца назад |
| GHSA-h792-v28v-ppgr Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability | CVSS3: 7.3 | 1% Низкий | 4 месяца назад |
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 17 дней назад | |
 | openSUSE-SU-2026:21329-1 Security update for tomcat11 | 4 месяца назад | ||
| openSUSE-SU-2026:21328-1 Security update for tomcat10 | 4 месяца назад | ||
| openSUSE-SU-2026:21327-1 Security update for tomcat | 4 месяца назад | ||
| SUSE-SU-2026:3167-1 Security update for tomcat | 4 месяца назад |
Уязвимостей на страницу