Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache Tomcat 8.0.0 Clear all filters
TI-2026-39931 CVE-2026-55276 · GHSA-mqg3-r7h5-24x4

Apache Tomcat: Logged effective web.xml is incomplete

Priority MEDIUM 48

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00607 Published 2026-06-29 Partial fix · 11.0.23, 10.1.56 +1 CWE-670
TI-2026-38490 CVE-2026-53404 · GHSA-h792-v28v-ppgr

Apache Tomcat: Bad ornext processing in RewriteValve

Priority LOW 39

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00699 Published 2026-06-29 Partial fix · 11.0.23, 10.1.56 +1 CWE-670