CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[UPDATE] [medium] Apache Tomcat: Multiple vulnerabilities

medium
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache Tomcat to conduct a Denial of Service attack or bypass security measures.

CSIRTS triage

vendor: Apacheproduct: TomcatDenial of serviceAuthentication bypass
What
Multiple vulnerabilities in Apache Tomcat enable denial of service attacks and security bypass.
Who is affected
Apache Tomcat deployments running affected versions.
Urgency
Medium severity with denial of service and security bypass risks; patch availability should determine remediation timing.
Action
Apply Apache Tomcat security updates covering the reported denial of service and security bypass vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Tomcat

Get an email when a new Tomcat advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-08-03
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2610

Recent advisories for Apache Tomcat

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-Bund (BSI) Security Advisories