Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Apr 1, 2025

1 new incident, 0 with updates.

Started

  • ClosedPatched

    Apache Tomcat: Tomcat Path Equivalence Vulnerability

    Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486. Added to CISA KEV on 2025-04-01.

    Apache TomcatClosed Apr 1, 2025