https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 10:38:10 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1358 certfr-2026-avi-1358 https://db.gcve.eu/vuln/certfr-2026-avi-1358 https://db.gcve.eu/vuln/fkie_cve-2026-74049 <p>Execution After Redirect (EAR) vulnerability in Apache Tomcat.</p> <p>This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.</p> <p>The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.</p> <p>Users are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue.</p> <p>Execution After Redirect (EAR) vulnerability in Apache Tomcat.</p> <p>This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.</p> <p>The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.</p> <p>Users are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-74049 https://db.gcve.eu/vuln/ghsa-2hg3-hfj5-cq2f <p>Execution After Redirect (EAR) vulnerability in Apache Tomcat.</p> <p>This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.</p> <p>The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.</p> <p>Users are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue.</p> <p>Execution After Redirect (EAR) vulnerability in Apache Tomcat.</p> <p>This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.</p> <p>The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.</p> <p>Users are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-2hg3-hfj5-cq2f https://db.gcve.eu/vuln/rhsa-2026:81365 <p>tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure tomcat: Apache Tomcat: Jasper JSTL &lt;c:redirect&gt; plug-in implementation omits page abort (SKIP_PAGE) tomcat: tomcat: Unauthorized socket access via TOCTOU race condition tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup tomcat: Apache Tomcat: Possible TLS 1.3 connection failures tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing tomcat: Apache Tomcat: Information disclosure via buffer under-read during non-blocking writes</p> <p>tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure tomcat: Apache Tomcat: Jasper JSTL &lt;c:redirect&gt; plug-in implementation omits page abort (SKIP_PAGE) tomcat: tomcat: Unauthorized socket access via TOCTOU race condition tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup tomcat: Apache Tomcat: Possible TLS 1.3 connection failures tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing tomcat: Apache Tomcat: Information disclosure via buffer under-read during non-blocking writes</p> https://db.gcve.eu/vuln/rhsa-2026:81365