Multiple vulnerabilities in Apache Tomcat

Description

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Information disclosure vulnerability can be exploited to obtain sensitive information.
3. Memory safety vulnerability can be exploited to execute arbitrary code.

Original advisories

• Fixed in Apache Tomcat 9.0.118

Exploitation

Related products

• Apache-Tomcat

CVE list

• CVE-2026-41284
  critical
• CVE-2026-41293
  critical
• CVE-2026-42498
  high
• CVE-2026-43512
  critical
• CVE-2026-43513
  critical
• CVE-2026-43514
  warning
• CVE-2026-43515
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com