Количество 13
Количество 13
CVE-2026-55276
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.
CVE-2026-55276
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.
CVE-2026-55276
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.
CVE-2026-55276
Always-Incorrect Control Flow Implementation vulnerability in Apache T ...
GHSA-mqg3-r7h5-24x4
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue.
BDU:2026-11858
Уязвимость сервера приложений Apache Tomcat, связанная с реализацией некорректного потока управления, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
openSUSE-SU-2026:21329-1
Security update for tomcat11
openSUSE-SU-2026:21328-1
Security update for tomcat10
openSUSE-SU-2026:21327-1
Security update for tomcat
SUSE-SU-2026:3167-1
Security update for tomcat
SUSE-SU-2026:3112-1
Security update for tomcat10
SUSE-SU-2026:3088-1
Security update for tomcat
SUSE-SU-2026:3087-1
Security update for tomcat11
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue. | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
 | CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue. | CVSS3: 2.3 | 1% Низкий | 3 месяца назад |
 | CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue. | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| CVE-2026-55276 Always-Incorrect Control Flow Implementation vulnerability in Apache T ... | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
| GHSA-mqg3-r7h5-24x4 Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119 which fixes the issue. | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
 | BDU:2026-11858 Уязвимость сервера приложений Apache Tomcat, связанная с реализацией некорректного потока управления, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:21329-1 Security update for tomcat11 | 2 месяца назад | ||
| openSUSE-SU-2026:21328-1 Security update for tomcat10 | 2 месяца назад | ||
| openSUSE-SU-2026:21327-1 Security update for tomcat | 2 месяца назад | ||
| SUSE-SU-2026:3167-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:3112-1 Security update for tomcat10 | около 2 месяцев назад | ||
| SUSE-SU-2026:3088-1 Security update for tomcat | 2 месяца назад | ||
| SUSE-SU-2026:3087-1 Security update for tomcat11 | 2 месяца назад |
Уязвимостей на страницу