https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:05:36.031927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-07501 bdu:2022-07501 2026-10-03T04:05:36.304619+00:00 bdu:2022-07501 https://cve.radiocsirt.org/vuln/bit-tomcat-2022-42252 BIT-tomcat-2022-42252 — Apache Tomcat request smuggling via malformed content-length 2026-10-03T04:05:36.304662+00:00

Affected: Bitnami: tomcat

If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0 to 9.0.67, 10.0.0 to 10.0.26 or 10.1.0 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-975 certfr-2022-avi-975 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer un contournement de la p… 2026-10-03T04:05:36.304696+00:00 certfr-2022-avi-975 https://cve.radiocsirt.org/vuln/cleanstart-2026-ag86451 Withdrawn: CLEANSTART-2026-AG86451 — Security fixes in tomcat9 9.0.68-r0 2026-10-03T04:05:36.304713+00:00

Withdrawn by the publisher.

Affected: CleanStart: tomcat9

Package tomcat9 version 9.0.68-r0 fixes 1 vulnerabilities: CVE-2022-42252

 https://cve.radiocsirt.org/vuln/euvd-2026-237886 EUVD-2026-237886 2026-10-03T04:05:36.304734+00:00 EUVD-2026-237886 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42252 fkie_cve-2022-42252 2026-10-03T04:05:36.304746+00:00

If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.

 https://cve.radiocsirt.org/vuln/ghsa-p22x-g9px-3945 GHSA-p22x-g9px-3945 — Apache Tomcat may reject request containing invalid Content-Length header 2026-10-03T04:05:36.304767+00:00

Affected: Maven: org.apache.tomcat.embed:tomcat-embed-core, Maven: org.apache.tomcat:tomcat-coyote

If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.

 https://cve.radiocsirt.org/vuln/gsd-2022-42252 gsd-2022-42252 2026-10-03T04:05:36.304796+00:00 gsd-2022-42252 https://cve.radiocsirt.org/vuln/oesa-2023-1058 OESA-2023-1058 — tomcat security update 2026-10-03T04:05:36.304807+00:00

Affected: openEuler:20.03-LTS-SP1: tomcat, openEuler:20.03-LTS-SP3: tomcat, openEuler:22.03-LTS: tomcat, openEuler:22.03-LTS-SP1: tomcat

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project Security Fix(es): If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.(CVE-2022-42252)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12534-1 openSUSE-SU-2024:12534-1 — tomcat-9.0.43-11.1 on GA media 2026-10-03T04:05:36.304835+00:00

tomcat-9.0.43-11.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:1663 RHSA-2023:1663 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.2 release and security update 2026-10-03T04:05:36.304853+00:00

tomcat: request smuggling tomcat: JsonErrorReportValve injection

 https://cve.radiocsirt.org/vuln/suse-su-2022:4193-1 SUSE-SU-2022:4193-1 — Security update for tomcat 2026-10-03T04:05:36.304870+00:00

Security update for tomcat

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-42252 UBUNTU-CVE-2022-42252 2026-10-03T04:05:36.304894+00:00

Affected: Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:20.04:LTS: tomcat9, Ubuntu:Pro:22.04:LTS: tomcat9

If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1918 WID-SEC-W-2022-1918 — Apache Tomcat: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T04:05:36.304922+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um Sicherheitsvorkehrungen zu umgehen.