DeutschShown in its original language — a full translation is planned for a future version.
Apache Tomcat: Mehrere Schwachstellen
view advisory published 2026-06-29
Ein Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Cross-Site-Scripting-Angriffe durchzuführen oder andere, nicht näher spezifizierte Auswirkungen auszulösen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-55957US | — | Exploit | ||
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate withou… | ||||
| CVE-2026-55956US | — | — | ||
Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or method omission configured as part of t… | ||||
| CVE-2026-55955US | — | — | ||
Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component.
This issue affects Apache Tomcat: from 1… | ||||
| CVE-2026-55276US | — | — | ||
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xm… | ||||
| CVE-2026-53434US | — | — | ||
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector.
This issue affects Apache Tomcat: from 11.0.0-M1 throug… | ||||
| CVE-2026-53404US | — | — | ||
Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions w… | ||||
| CVE-2026-50229US | — | Exploit | ||
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat.
This issue affects Apache Tomcat: from 1… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:39189 vom 2026-07-14external
- Red Hat Security Advisory RHSA-2026:43401 vom 2026-07-22external
- Red Hat Security Advisory RHSA-2026:43402 vom 2026-07-22external
- Red Hat Security Advisory RHSA-2026:49951 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:49952 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:67163 vom 2026-09-14external
- Red Hat Security Advisory RHSA-2026:67164 vom 2026-09-14external
- Red Hat Security Advisory RHSA-2026:68677 vom 2026-09-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan