EPSS 0.5%top 56%
Tomcat6: Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer… (CVE-2026-65182)
0
MediumVulnerabilityCVE-2026-65182gcvecsafcve-2026-65182cve-2026-65183cve-2026-65637cve-2026-65905cve-2026-65927cve-2026-66299cve-2026-66422cve-2026-68525cve-2026-68763cve-2026-73180red-hat-product-securityosvghsa-gcx9-497g-6cp6ghsamavenbit-tomcat-2026-65182bitnamicve-2026-68569suse-product-security-teamubuntu-cve-2026-65182ubuntu-pro-14-04-ltsubuntu-pro-16-04-ltsubuntu-pro-18-04-ltsubuntu-pro-20-04-ltsubuntu-pro-22-04-ltsubuntu-24-04-ltsubuntu-26-10ubuntu-26-04-lts
Published: 08/25/2026 (08/25/2026, 22:17:00 UTC)
Source: GCVE Database
Product: tomcat6
Description
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to tomcat10 and tomcat11 packages. This update addresses multiple vulnerabilities identified by several CVEs including CVE-2026-65182 and others. The advisory provides updated RPM packages with bug fixes and enhancements. A patch is available for affected versions. No active exploits in the wild are reported at this time.
CVSS v3.1
Score 9.1critical
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected software
tomcat6
pkg:deb/ubuntu/tomcat6?arch=source&distro=esm-infra-legacy/trustyAffected versions
=6.0.37-1=6.0.39-1=6.0.39-1ubuntu0.1=6.0.39-1ubuntu0.1+esm1=6.0.39-1ubuntu0.1+esm2=6.0.39-1ubuntu0.1+esm3
tomcat7
pkg:deb/ubuntu/tomcat7?arch=source&distro=esm-infra-legacy/trustyAffected versions
=7.0.42-1=7.0.47-1=7.0.50-1=7.0.52-1=7.0.52-1ubuntu0.1=7.0.52-1ubuntu0.3=7.0.52-1ubuntu0.6=7.0.52-1ubuntu0.7=7.0.52-1ubuntu0.8=7.0.52-1ubuntu0.9=7.0.52-1ubuntu0.10=7.0.52-1ubuntu0.11=7.0.52-1ubuntu0.13=7.0.52-1ubuntu0.14=7.0.52-1ubuntu0.15=7.0.52-1ubuntu0.16=7.0.52-1ubuntu0.16+esm1=7.0.52-1ubuntu0.16+esm2
tomcat8
pkg:deb/ubuntu/tomcat8?arch=source&distro=esm-infra-legacy/xenialAffected versions
=8.0.26-1=8.0.28-1=8.0.30-1=8.0.32-1=8.0.32-1ubuntu1=8.0.32-1ubuntu1.1=8.0.32-1ubuntu1.2=8.0.32-1ubuntu1.3=8.0.32-1ubuntu1.4=8.0.32-1ubuntu1.5=8.0.32-1ubuntu1.6=8.0.32-1ubuntu1.7=8.0.32-1ubuntu1.8=8.0.32-1ubuntu1.9=8.0.32-1ubuntu1.10=8.0.32-1ubuntu1.11=8.0.32-1ubuntu1.13=8.0.32-1ubuntu1.13+esm1=8.0.32-1ubuntu1.13+esm2
tomcat7
pkg:deb/ubuntu/tomcat7?arch=source&distro=esm-apps-legacy/xenialAffected versions
=7.0.64-1=7.0.68-1=7.0.68-1ubuntu0.1=7.0.68-1ubuntu0.3=7.0.68-1ubuntu0.4=7.0.68-1ubuntu0.4+esm1=7.0.68-1ubuntu0.4+esm2=7.0.68-1ubuntu0.4+esm3=7.0.68-1ubuntu0.4+esm4
tomcat8
pkg:deb/ubuntu/tomcat8?arch=source&distro=esm-apps/bionicAffected versions
=8.5.21-1ubuntu1=8.5.29-1=8.5.30-1=8.5.30-1ubuntu1=8.5.30-1ubuntu1.2=8.5.30-1ubuntu1.3=8.5.30-1ubuntu1.4=8.5.39-1ubuntu1~18.04.1=8.5.39-1ubuntu1~18.04.2=8.5.39-1ubuntu1~18.04.3=8.5.39-1ubuntu1~18.04.3+esm1=8.5.39-1ubuntu1~18.04.3+esm2=8.5.39-1ubuntu1~18.04.3+esm3=8.5.39-1ubuntu1~18.04.3+esm4=8.5.39-1ubuntu1~18.04.3+esm5=8.5.39-1ubuntu1~18.04.3+esm6
tomcat9
pkg:deb/ubuntu/tomcat9?arch=source&distro=esm-apps/bionicAffected versions
=9.0.16-3~18.04.1=9.0.16-3ubuntu0.18.04.1=9.0.16-3ubuntu0.18.04.2=9.0.16-3ubuntu0.18.04.2+esm1=9.0.16-3ubuntu0.18.04.2+esm2=9.0.16-3ubuntu0.18.04.2+esm3=9.0.16-3ubuntu0.18.04.2+esm4=9.0.16-3ubuntu0.18.04.2+esm5=9.0.16-3ubuntu0.18.04.2+esm6=9.0.16-3ubuntu0.18.04.2+esm7=9.0.16-3ubuntu0.18.04.2+esm8
tomcat9
pkg:deb/ubuntu/tomcat9?arch=source&distro=esm-apps/focalAffected versions
=9.0.24-1=9.0.27-1=9.0.31-1=9.0.31-1ubuntu0.1=9.0.31-1ubuntu0.2=9.0.31-1ubuntu0.3=9.0.31-1ubuntu0.4=9.0.31-1ubuntu0.5=9.0.31-1ubuntu0.6=9.0.31-1ubuntu0.7=9.0.31-1ubuntu0.8=9.0.31-1ubuntu0.9=9.0.31-1ubuntu0.9+esm1=9.0.31-1ubuntu0.9+esm2=9.0.31-1ubuntu0.9+esm3
tomcat9
pkg:deb/ubuntu/tomcat9?arch=source&distro=esm-apps/jammyAffected versions
=9.0.43-3=9.0.54-1=9.0.55-1=9.0.58-1=9.0.58-1ubuntu0.1=9.0.58-1ubuntu0.1+esm1=9.0.58-1ubuntu0.1+esm2=9.0.58-1ubuntu0.1+esm3=9.0.58-1ubuntu0.1+esm4=9.0.58-1ubuntu0.2=9.0.58-1ubuntu0.2+esm1=9.0.58-1ubuntu0.2+esm2=9.0.58-1ubuntu0.2+esm3=9.0.58-1ubuntu0.2+esm4
tomcat10
pkg:deb/ubuntu/tomcat10?arch=source&distro=nobleAffected versions
=10.1.10-1=10.1.14-1=10.1.15-1=10.1.16-1=10.1.16-1ubuntu0.1~esm1=10.1.16-1ubuntu0.1~esm2=10.1.16-1ubuntu0.1~esm3=10.1.16-1ubuntu0.1~esm4=10.1.55-1ubuntu2~24.04.1
tomcat9
pkg:deb/ubuntu/tomcat9?arch=source&distro=nobleAffected versions
=9.0.70-1ubuntu1=9.0.70-2=9.0.70-2ubuntu0.1=9.0.70-2ubuntu0.1+esm1=9.0.70-2ubuntu0.1+esm2=9.0.70-2ubuntu0.1+esm3=9.0.118-1~24.04.1
tomcat10
pkg:deb/ubuntu/tomcat10?arch=source&distro=stonkingAffected versions
=10.1.40-1ubuntu1=10.1.54-1=10.1.54-1ubuntu1=10.1.54-1ubuntu2=10.1.55-1ubuntu1=10.1.55-1ubuntu2=10.1.57~us1-0ubuntu1
tomcat11
pkg:deb/ubuntu/tomcat11?arch=source&distro=stonkingAffected versions
=11.0.18-1=11.0.22-2=11.0.22-2ubuntu1=11.0.22-2ubuntu2=11.0.24-1ubuntu1
tomcat9
pkg:deb/ubuntu/tomcat9?arch=source&distro=stonkingAffected versions
=9.0.115-1=9.0.115-1ubuntu1=9.0.118-1
tomcat10
pkg:deb/ubuntu/tomcat10?arch=source&distro=resoluteAffected versions
=10.1.40-1ubuntu1=10.1.40-1ubuntu1.26.04.1=10.1.55-1ubuntu2~26.04.1
tomcat9
pkg:deb/ubuntu/tomcat9?arch=source&distro=resoluteAffected versions
=9.0.95-1ubuntu1=9.0.111-1=9.0.115-1=9.0.115-1ubuntu0.1=9.0.118-1~26.04.1
tomcat11
pkg:deb/ubuntu/tomcat11?arch=source&distro=resoluteAffected versions
=11.0.6-1=11.0.11-1=11.0.15-1=11.0.18-1=11.0.18-1ubuntu0.1~esm1=11.0.22-2ubuntu2~26.04.1
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:56039
- Cve Count
- 10
- Additional Cves
- ["CVE-2026-65183","CVE-2026-65637","CVE-2026-65905","CVE-2026-65927","CVE-2026-66299","CVE-2026-66422","CVE-2026-68525","CVE-2026-68763","CVE-2026-73180"]
- State
- PUBLISHED
Threat ID: 6a998f5facd9273b49192d83
Added to database: 09/03/2026, 15:16:47 UTC
Last enriched: 10/01/2026, 19:53:56 UTC
Last updated: 10/18/2026, 18:48:22 UTC
Views: 78
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Sort by
Loading community insights…
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Please log in to the Console to use AI analysis features.
External Links
NVD DatabaseMITRE CVEhttps://access.redhat.com/errata/RHSA-2026:56039https://images.redhat.com/https://access.redhat.com/security/cve/CVE-2026-66299https://access.redhat.com/security/updates/classification/https://access.redhat.com/security/cve/CVE-2026-73180https://access.redhat.com/security/cve/CVE-2026-65927https://access.redhat.com/security/cve/CVE-2026-68763https://access.redhat.com/security/cve/CVE-2026-65182https://access.redhat.com/security/cve/CVE-2026-66422https://access.redhat.com/security/cve/CVE-2026-65183https://access.redhat.com/security/cve/CVE-2026-65637https://access.redhat.com/security/cve/CVE-2026-68525https://access.redhat.com/security/cve/CVE-2026-65905Canonical URLReference 15Reference 16Reference 17Reference 18Reference 19Reference 20Reference 21Reference 22Reference 23https://access.redhat.com/errata/RHSA-2026:63137Canonical URLSUSE ratingsURL of this CSAF noticeSUSE CVE CVE-2026-65182 pageSUSE CVE CVE-2026-65183 pageSUSE CVE CVE-2026-65637 pageSUSE CVE CVE-2026-65905 pageSUSE CVE CVE-2026-65927 pageSUSE CVE CVE-2026-66299 pageSUSE CVE CVE-2026-66422 pageSUSE CVE CVE-2026-68525 pageSUSE CVE CVE-2026-68569 pageSUSE CVE CVE-2026-68763 pageSUSE CVE CVE-2026-73180 pagehttps://access.redhat.com/errata/RHSA-2026:76952https://access.redhat.com/security/updates/classification/#importanthttps://docs.redhat.com/en/documentation/red_hat_jboss_web_server/7.0/html/red_hat_jboss_web_server_7.0_service_pack_2_release_notes/index25080852524151252415325241542524155252415625241602524161252416225241652524166Canonical URLReference 54Reference 55Search on Google
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Breach by OffSeqOFFSEQFRIENDS — 25% OFF
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
OffSeq TrainingCredly Certified
Lead Pen Test Professional
Technical5-day eLearningPECB Accredited