Red Hat Security Advisory

RHSA-2026:19054

tomcat security update

Released 2026-05-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) tomcat-1:10.1.49-1.el10_2.1, tomcat-admin-webapps-1:10.1.49-1.el10_2.1, tomcat-docs-webapp-1:10.1.49-1.el10_2.1 +5

TI-2026-19939 CVE-2026-24734 · GHSA-mgp5-rv84-w37q

LOW 34

Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00575 Published 2026-02-17 Partial fix · 11.0.18, 10.1.52 +1 CWE-20