Critical
CVE-2026-65905
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41
Reset filters
Critical
CVE-2026-65182
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability
Critical
CVE-2026-68525
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
High
CVE-2026-41284
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
Low
CVE-2026-43514
Apache Tomcat - AJP secret compared in non-constant time
Critical
CVE-2026-43512
Apache Tomcat - Digest authenticator will authenticate any unknown user
High
CVE-2026-43513
Apache Tomcat: LockOutRealm treats user names as case-sensitive
Critical
CVE-2026-43515
Apache Tomcat - Security constraints not correctly applied
High
CVE-2026-42498
Apache Tomcat - WebSocket authentication header exposure
High
CVE-2026-34483
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
Medium
CVE-2026-25854
Apache Tomcat has an Open Redirect vulnerability
Low
CVE-2025-55754
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
High
CVE-2025-55752
Apache Tomcat Vulnerable to Relative Path Traversal
Low
CVE-2025-61795
Apache Tomcat Vulnerable to Improper Resource Shutdown or Release
Medium
CVE-2025-55668
Apache Tomcat Session Fixation vulnerability
High
CVE-2025-52520
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
Medium
CVE-2025-49125
Apache Tomcat - Security constraint bypass for pre/post-resources
High
CVE-2025-48988
Apache Tomcat - DoS in multipart upload
Medium
CVE-2025-49124
Apache Tomcat installer for Windows has an untrusted search path vulnerability
Low
CVE-2025-46701
Apache Tomcat - CGI security constraint bypass
Low
CVE-2025-31651
Apache Tomcat Rewrite rule bypass
Critical
Exploited in attacks
CVE-2025-24813
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
High
CVE-2024-56337
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
High
CVE-2024-50379
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.