Tomcat (< 9.0.99, 10.1.35, 11.0.3, 10.1.0, 11.0.0)

A critical remote code execution vulnerability (CVE-2025-24813) in Apache Tomcat with a CVSS score of 10.0 is now being targeted by publicly available proof-of-concept exploit tools.