Apr 1, 2025
1 new incident, 0 with updates.
Started
- ClosedPatched
Apache Tomcat: Tomcat Path Equivalence Vulnerability
Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486. Added to CISA KEV on 2025-04-01.
Apache TomcatClosed Apr 1, 2025