PT-2026-40069

CVE-2026-41293

·

Published

2026-05-11

·

Updated

2026-10-29

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 10.0.0-M1 through 10.0.27
Description Improper Input Validation occurs in Apache Tomcat, which can lead to security issues when the software fails to properly validate input data.
Recommendations Upgrade to version [FIXED VERSION].
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-R29C-68GH-XP6X
ALSA-2026:68651
ALSA-2026:68660
ALSA-2026:68677
ALSA-2026:69259
BIT-TOMCAT-2026-41293
CLEANSTART-2026-NC17468
CLEANSTART-2026-NW12954
CLSA-2026-1779465287
CLSA-2026-1779957268
CLSA-2026-1780649787
CLSA-2026-1780650326
OESA-2026-2296
OPENSUSE-SU-2026:10925-1
OPENSUSE-SU-2026:10926-1
OPENSUSE-SU-2026:10927-1
OPENSUSE-SU-2026:21117-1
OPENSUSE-SU-2026:21121-1
OPENSUSE-SU-2026:21122-1
RHSA-2026:39188
RHSA-2026:43401
SUSE-SU-2026:22195-1
SUSE-SU-2026:22196-1
SUSE-SU-2026:22197-1
SUSE-SU-2026:2299-1
SUSE-SU-2026:2374-1
SUSE-SU-2026:2377-1
SUSE-SU-2026:2675-1
SUSE-SU-2026:4927-1
USN-8417-1
USN-8450-1
Found an issue in the description? Have something to add? Feel free to write us 👾