Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

2 briefs RSS
critical advisory

Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

A critical remote code execution vulnerability (CVE-2025-24813) in Apache Tomcat with a CVSS score of 10.0 is now being targeted by publicly available proof-of-concept exploit tools.

Tomcat vulnerability rce webserver
1c
high threat

Multiple Vulnerabilities in Apache Tomcat

Multiple vulnerabilities, including CVE-2026-59083 and CVE-2026-59084, have been discovered in Apache Tomcat versions 10.1.x prior to 10.1.57, 11.0.x prior to 11.0.24, and 9.0.x prior to 9.0.120, allowing an attacker to bypass security policies and cause an unspecified security issue.

exploited Tomcat 10.1.x +2 vulnerability apache tomcat web-server
1t 2c