Tomcat
Security incidents tagged Tomcat. Newest first.
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 79
- Longest quiet run: 489 days (Apr 2–Aug 3)
Show 2 older incidents2 older incidents
August 2026 1
HighApache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityPatched
Apache Tomcat Patched
Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813. Added to CISA KEV on 2026-08-04.
Open incident →CVE-2026-34486
April 2025 1
CriticalApache Tomcat: Tomcat Path Equivalence VulnerabilityPatched
Apache Tomcat Patched
Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486. Added to CISA KEV on 2025-04-01.
Open incident →CVE-2025-24813
1 Tomcat incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
