TI-2025-35172 CVE-2025-55752 · GHSA-wmwf-9ccg-fff5
Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled
Priority HIGH 71
Relative Path Traversal vulnerability in Apache Tomcat.
RHSA-2026:2726
pki-deps:10.6 security update
Released 2026-02-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.6) apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.6) apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6 +47
Fixes 2 records
TI-2025-22813 CVE-2025-31651 · GHSA-ff77-26x5-69cr
Apache Tomcat: Bypass of rules in Rewrite Valve
Priority MEDIUM 56
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.