Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to tomcat10 and tomcat11 packages. This update addresses multiple vulnerabilities identified by several CVEs including CVE-2026-65182 and others. The advisory provides updated RPM packages with bug fixes and enhancements. A patch is available for affected versions. No active exploits in the wild are reported at this time.

This Red Hat security advisory (RHSA-2026:56039) announces an update for Red Hat Hardened Images RPMs, specifically for tomcat10 and tomcat11 packages. The update includes multiple RPMs such as tomcat10-10.1.59-0.1.hum1 and tomcat11-11.0.25-0.1.hum1, which address a series of vulnerabilities tracked under CVE-2026-65182 and related CVEs. The advisory lists affected versions including Red Hat versions >=7.0.0 <=7.0.109, >=8.5.0 <=8.5.100, <9.0.121, >=10.1.0 <10.1.58, and >=11.0.0 <11.0.25. The update is classified as a security advisory with high severity. The vendor has released patches and recommends applying these updates to mitigate the vulnerabilities.

Detailed information about Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update affecting Red Hat Product Security Red Hat. Ge

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:56039

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-66299

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-73180

https://access.redhat.com/security/cve/CVE-2026-65927

https://access.redhat.com/security/cve/CVE-2026-68763

https://access.redhat.com/security/cve/CVE-2026-65182

https://access.redhat.com/security/cve/CVE-2026-66422

https://access.redhat.com/security/cve/CVE-2026-65183

https://access.redhat.com/security/cve/CVE-2026-65637

https://access.redhat.com/security/cve/CVE-2026-68525

https://access.redhat.com/security/cve/CVE-2026-65905

Canonical URL

https://access.redhat.com/errata/RHSA-2026:63137

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2026-65182 page

SUSE CVE CVE-2026-65183 page

SUSE CVE CVE-2026-65637 page

SUSE CVE CVE-2026-65905 page

SUSE CVE CVE-2026-65927 page

SUSE CVE CVE-2026-66299 page

SUSE CVE CVE-2026-66422 page

SUSE CVE CVE-2026-68525 page

SUSE CVE CVE-2026-68569 page

SUSE CVE CVE-2026-68763 page

SUSE CVE CVE-2026-73180 page

https://access.redhat.com/errata/RHSA-2026:76952

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_jboss_web_server/7.0/html/red_hat_jboss_web_server_7.0_service_pack_2_release_notes/index

2508085

2524151

2524153

2524154

2524155

2524156

2524160

2524161

2524162

2524165

2524166

Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.2 release and security update

CVE-2026-65182 is a critical improper access control vulnerability in Apache Tomcat that allows security constraint bypass when a longer path constraint is specified before a more restrictive constraint for a shorter sub-path. This affects multiple versions of Apache Tomcat from 7.0.0 through 11.0.24. The vulnerability can lead to unauthorized access due to incorrect authorization checks. Fixed versions include 11.0.25, 10.1.58, and 9.0.121.

This vulnerability in Apache Tomcat involves improper access control where security constraints are bypassed if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This incorrect authorization logic affects Apache Tomcat versions from 11.0.0-M1 through 11.0.24, 10.1.0-M1 through 10.1.57, 9.0.0.M1 through 9.0.120, 8.5.0 through 8.5.100, and 7.0.0 through 7.0.109. The issue is addressed by upgrading to versions 11.0.25, 10.1.58, or 9.0.121 and later.

Detailed information about CVE-2026-65182: CWE-284 Improper Access Control in Apache Software Foundation Apache Tomcat affecting Apache Software Foundation Apac

CVE-2026-65182: CWE-284 Improper Access Control in Apache Software Foundation Apache Tomcat - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-65182: CWE-284 Improper Access Control in Apache Software Foundation Apache Tomcat


Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.2 release and security updateCVE-2026-65182 0 Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to tomcat10 and tomcat11 packages. This update addresses multiple vulnerabilities identified by several CVEs including CVE-2026-65182 and others. The advisory provides updated RPM packages with bug fixes and enhancements. A patch is available for affected versions. No active exploits in the wild are reported at this time. HighVulnerability#gcve #csaf #cve-2026-65182 Join the discussion	GCVE Database	10/07/2026, 14:02:59 UTC Added: 09/03/2026, 15:16:47 UTC
CVE-2026-65182: CWE-284 Improper Access Control in Apache Software Foundation Apache TomcatCVE-2026-65182 0 CVE-2026-65182 is a critical improper access control vulnerability in Apache Tomcat that allows security constraint bypass when a longer path constraint is specified before a more restrictive constraint for a shorter sub-path. This affects multiple versions of Apache Tomcat from 7.0.0 through 11.0.24. The vulnerability can lead to unauthorized access due to incorrect authorization checks. Fixed versions include 11.0.25, 10.1.58, and 9.0.121. CriticalVulnerability#cve #cve-2026-65182 #cwe-284 Join the discussion	CVE Database V5	08/26/2026, 00:30:52 UTC Added: 08/25/2026, 21:52:55 UTC

Threats Tagged 'bit-tomcat-2026-65182'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'bit-tomcat-2026-65182'

Lead Pen Test Professional