Threats tagged 'bit-tomcat-2026-74049'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.3%	CVE-2026-74049Apache Tomcat · Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE) HighEPSS 0.3%2026-10-29GCVE DatabaseCVE-2026-74049 An Execution After Redirect (EAR) vulnerability exists in Apache Tomcat's Jasper JSTL <c:redirect> plug-in implementation, where the page abort (SKIP_PAGE) is omitted. This affects multiple versions of Apache Tomcat, including 7.0.0 through 9.0.122, 10.1.0 through 10.1.60, and 11.0.0 through 11.0.26. The issue is fixed in versions 9.0.123, 10.1.61, and 11.0.27. EPSS 0.3%Report on CVE-2026-74049 Vulnerability #bit-tomcat-2026-74049 #bitnami	GCVE Database	2026-10-29

Page 1 of 1