https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:02:48.938134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2010-avi-041 certa-2010-avi-041 — De multiples vulnérabilités permettant de contourner la politique de sécurité ont été corrigées dans Apache Tomcat. 2026-10-03T03:02:49.008306+00:00 certa-2010-avi-041 https://cve.radiocsirt.org/vuln/euvd-2026-123722 EUVD-2026-123722 2026-10-03T03:02:49.008345+00:00 EUVD-2026-123722 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2901 fkie_cve-2009-2901 2026-10-03T03:02:49.008360+00:00

The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-hjfh-7c4v-7q8h GHSA-hjfh-7c4v-7q8h — Improper Authentication in Apache Tomcat 2026-10-03T03:02:49.008390+00:00

Affected: Maven: org.apache.tomcat:tomcat

The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.

 https://cve.radiocsirt.org/vuln/gsd-2009-2901 gsd-2009-2901 2026-10-03T03:02:49.008414+00:00 gsd-2009-2901