Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
403,894CVE records
2,871Published, last 7 days
1,739In CISA KEV
1,498Critical, last 30 days
5,599Analysed
17:17 UTCLast NVD sync
Filters Show:
274 results. Apache Tomcat.
Page 2 of 14| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-43515 | Critical | 9.1 |  Apache Tomcat | Improper authorization | - | - | 1.2% | May 12, 2026 |
| CVE-2026-43514 | Low | 3.7 | Apache Tomcat | CWE-208 | - | - | 0.53% | May 12, 2026 |
| CVE-2026-43513 | High | 7.5 | Apache Tomcat | CWE-178 | - | - | 0.50% | May 12, 2026 |
| CVE-2026-43512 | Critical | 9.8 | Apache Tomcat | CWE-592 | - | - | 1.3% | May 12, 2026 |
| CVE-2026-42498 | High | 7.3 | Apache Tomcat | Information exposure | - | - | 0.65% | May 12, 2026 |
| CVE-2026-41293 | Critical | 9.8 | Apache Tomcat | Improper input validation | - | - | 1.7% | May 12, 2026 |
| CVE-2026-41284 | High | 7.5 | Apache Tomcat | Allocation without limits | - | - | 0.86% | May 12, 2026 |
| CVE-2026-34500 | Medium | 6.5 | Apache Tomcat | Improper authentication | - | - | 0.45% | Apr 9, 2026 |
| CVE-2026-34487 | High | 7.5 | Apache Tomcat | Sensitive information in log file | - | - | 0.45% | Apr 9, 2026 |
| CVE-2026-34486 | High | 7.5 | Apache Tomcat +6 | Missing encryption | Listed | Confirmed | 6.6% | Apr 9, 2026 |
| CVE-2026-34483 | High | 7.5 | Apache Tomcat | CWE-116 | - | - | 0.46% | Apr 9, 2026 |
| CVE-2026-32990 | Medium | 5.3 | Apache Tomcat | Improper input validation | - | - | 0.56% | Apr 9, 2026 |
| CVE-2026-29146 | High | 7.5 | Apache Tomcat | Error message information leak | - | - | 2.9% | Apr 9, 2026 |
| CVE-2026-29145 | Critical | 9.1 | Apache Tomcat +1 | Improper authentication | - | - | 0.72% | Apr 9, 2026 |
| CVE-2026-29129 | High | 7.5 | Apache Tomcat | Broken cryptographic algorithm | - | - | 0.37% | Apr 9, 2026 |
| CVE-2026-25854 | Medium | 6.1 | Apache Tomcat | Open redirect | - | - | 0.53% | Apr 9, 2026 |
| CVE-2026-24880 | High | 7.5 | Apache Tomcat | HTTP request smuggling | - | - | 0.68% | Apr 9, 2026 |
| CVE-2026-24734 | High | 7.5 | Apache Tomcat +1 | Improper input validation | - | - | 0.52% | Feb 17, 2026 |
| CVE-2026-24733 | Low | 3.7 | Apache Tomcat | Improper input validation | - | - | 0.51% | Feb 17, 2026 |
| CVE-2025-66614 | Critical | 9.1 | Apache Tomcat | Improper input validation | - | - | 0.24% | Feb 17, 2026 |
