DeutschShown in its original language — a full translation is planned for a future version.
Apache Tomcat und Tomcat Native: Mehrere Schwachstellen
view advisory published 2026-02-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat und Tomcat Native ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-24734US | high7.5 | — | ||
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat.
When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did n… | ||||
| CVE-2026-24733US | low3.7 | Exploit | ||
Improper Input Validation vulnerability in Apache Tomcat.
Tomcat did not limit HTTP/0.9 requests to the GET method. If a security
constraint was configured to allow HEAD request… | ||||
| CVE-2025-66614US | critical9.1 | — | ||
Improper Input Validation vulnerability.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112.
The foll… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:12194 vom 2026-04-30external
- Red Hat Security Advisory RHSA-2026:12195 vom 2026-04-30external
- Red Hat Security Advisory RHSA-2026:19054 vom 2026-05-19external
- Red Hat Security Advisory RHSA-2026:25341 vom 2026-06-11external
- Red Hat Security Advisory RHSA-2026:26323 vom 2026-06-16external
- Red Hat Security Advisory RHSA-2026:5611 vom 2026-03-25external
- Red Hat Security Advisory RHSA-2026:5612 vom 2026-03-25external
- Red Hat Security Advisory RHSA-2026:67164 vom 2026-09-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan