Multiple security vulnerabilities have been identified in Apache Tomcat, including a security constraint bypass due to improper access control (CVE-2026-65182) among others. These issues affect versions prior to 1:9.0.121-1.el8_10 and have been addressed in the fixed version 1:9.0.121-1.el8_10. The vulnerabilities include access control bypasses, improper input validation, and authentication bypasses. Red Hat has issued an important security update for affected Red Hat Enterprise Linux 8 distributions to remediate these issues.