Поиск уязвимостей
Количество 29
Количество 29
BDU:2026-16148
Уязвимость процесса аутентификации FORM сервера приложений Apache Tomcat, позволяющая нарушителю обойти ограничения безопасности
CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue.
CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue.
CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue.
CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authenti ...
ALT-PU-2026-13975
ALT-PU-2026-13975: package `tomcat10` update to version 10.1.59-alt0.p11.1
ROS-20260922-80-0092
Уязвимость tomcat11
ROS-20260922-80-0091
Уязвимость tomcat10
ROS-20260922-80-0090
Уязвимость tomcat
ROS-20260922-73-0067
Уязвимость tomcat10
ROS-20260922-73-0065
Уязвимость tomcat11
ROS-20260922-73-0064
Уязвимость tomcat
GHSA-h3x4-894j-xpx5
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
ALT-PU-2016-3269
ALT-PU-2016-3269: package `tomcat` update to version 8.0.26-alt1_1jpp8
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
RLSA-2026:92869
Important: tomcat security update
ELSA-2026-92869
ELSA-2026-92869: tomcat security update (IMPORTANT)
ELSA-2026-92862
ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-16148 Уязвимость процесса аутентификации FORM сервера приложений Apache Tomcat, позволяющая нарушителю обойти ограничения безопасности | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
 | CVE-2026-68525 Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue. | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
 | CVE-2026-68525 Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue. | CVSS3: 6.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-68525 Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue. | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| CVE-2026-68525 Incorrect Authorization vulnerability in Apache Tomcat's FORM authenti ... | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| ALT-PU-2026-13975 ALT-PU-2026-13975: package `tomcat10` update to version 10.1.59-alt0.p11.1 | CVSS3: 9.8 | 2 месяца назад | |
 | ROS-20260922-80-0092 Уязвимость tomcat11 | CVSS3: 9.1 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0091 Уязвимость tomcat10 | CVSS3: 9.1 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0090 Уязвимость tomcat | CVSS3: 9.1 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0067 Уязвимость tomcat10 | CVSS3: 9.1 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0065 Уязвимость tomcat11 | CVSS3: 9.1 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0064 Уязвимость tomcat | CVSS3: 9.1 | 1% Низкий | около 2 месяцев назад |
| GHSA-h3x4-894j-xpx5 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| ALT-PU-2016-3269 ALT-PU-2016-3269: package `tomcat` update to version 8.0.26-alt1_1jpp8 | CVSS3: 9.8 | больше 10 лет назад | |
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 17 дней назад | |
 | RLSA-2026:92869 Important: tomcat security update | 9 дней назад | ||
| ELSA-2026-92869 ELSA-2026-92869: tomcat security update (IMPORTANT) | 11 дней назад | ||
| ELSA-2026-92862 ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT) | 10 дней назад |
Уязвимостей на страницу