https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:52:23.906822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-09530 cnvd-2016-09530 2026-10-03T13:52:23.911108+00:00 cnvd-2016-09530 https://cve.radiocsirt.org/vuln/euvd-2026-85196 EUVD-2026-85196 2026-10-03T13:52:23.911143+00:00 EUVD-2026-85196 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5425 fkie_cve-2016-5425 2026-10-03T13:52:23.911163+00:00

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.

 https://cve.radiocsirt.org/vuln/ghsa-c7fc-mp9g-99j3 GHSA-c7fc-mp9g-99j3 2026-10-03T13:52:23.911194+00:00

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.

 https://cve.radiocsirt.org/vuln/gsd-2016-5425 gsd-2016-5425 2026-10-03T13:52:23.911210+00:00 gsd-2016-5425 https://cve.radiocsirt.org/vuln/rhsa-2016:2046 RHSA-2016:2046 — Red Hat Security Advisory: tomcat security update 2026-10-03T13:52:23.911234+00:00

Tomcat/JbossWeb: security manager bypass via EL expressions tomcat: Session fixation Tomcat: CGI sets environmental variable based on user supplied Proxy request header tomcat: Local privilege escalation via systemd-tmpfiles service tomcat: tomcat writable config files allow privilege escalation