xiaoqiMikko/tomcat-check

PoC

查出 Spring Boot 内嵌 Tomcat 的真实版本(pom 里没有),并对每条 2026 年 CVE 同时给出 ASF 官方评级与 GitHub 评级、触发条件、以及这条会不会进 Dependabot 告警 CVE-2026-41293

view exploit source poc_in_githubauthor xiaoqiMikkopublished 2026-08-06catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-41293US	—	1.68% (77th)	Exploit	2026-05-12
Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.