Multiple vulnerabilities in Apache Tomcat

Description

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Information disclosure vulnerability can be exploited to obtain sensitive information.
3. Memory safety vulnerability can be exploited to execute arbitrary code.

Original advisories

• Fixed in Apache Tomcat 9.0.118

Exploitation

Related products

• Apache-Tomcat

CVE list

• CVE-2026-41284
  unknown
• CVE-2026-41293
  unknown
• CVE-2026-42498
  unknown
• CVE-2026-43512
  unknown
• CVE-2026-43513
  unknown
• CVE-2026-43514
  unknown
• CVE-2026-43515
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com