Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,723CVE records
2,943Published, last 7 days
1,728In CISA KEV
1,428Critical, last 30 days
5,599Analysed
16:26 UTCLast NVD sync
Filters Show:
274 results. Apache Tomcat.
Page 1 of 14| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-73180 | Medium | 6.8 |  Apache Tomcat | Insufficient session expiration | — | — | 0.43% | Aug 25, 2026 |
| CVE-2026-68763 | High | 7.5 | Apache Tomcat | Uncontrolled resource consumption | — | — | 0.86% | Aug 25, 2026 |
| CVE-2026-68569 | High | 8.1 | Apache Tomcat | Improper authentication | — | — | 0.60% | Aug 25, 2026 |
| CVE-2026-68525 | Critical | 9.1 | Apache Tomcat | Incorrect authorization | — | — | 0.64% | Aug 25, 2026 |
| CVE-2026-66422 | High | 8.1 | Apache Tomcat | Improper authorization | — | — | 0.55% | Aug 25, 2026 |
| CVE-2026-65927 | High | 7.5 | Apache Tomcat | CWE-193 | — | — | 0.86% | Aug 25, 2026 |
| CVE-2026-65905 | Critical | 9.8 | Apache Tomcat | Authentication bypass by capture-r | — | — | 0.78% | Aug 25, 2026 |
| CVE-2026-65637 | Critical | 9.8 | Apache Tomcat | Improper input validation | — | — | 0.74% | Aug 25, 2026 |
| CVE-2026-65183 | High | 8.1 | Apache Tomcat | TOCTOU race condition | — | — | 0.46% | Aug 25, 2026 |
| CVE-2026-65182 | Critical | 9.1 | Apache Tomcat | Improper access control | — | — | 0.65% | Aug 25, 2026 |
| CVE-2026-66299 | Medium | 5.3 | Apache Tomcat | Uncontrolled resource consumption | — | — | 0.74% | Jul 28, 2026 |
| CVE-2026-59084 | Critical | 9.1 | Apache Tomcat | CWE-1059 | — | — | 0.51% | Jul 14, 2026 |
| CVE-2026-59083 | Critical | 9.1 | Apache Tomcat | CWE-177 | — | — | 0.37% | Jul 14, 2026 |
| CVE-2026-55957 | High | 7.3 | Apache Tomcat | CWE-304 | — | — | 2.9% | Jun 29, 2026 |
| CVE-2026-55956 | Medium | 6.5 | Apache Tomcat | Improper authorization | — | — | 0.70% | Jun 29, 2026 |
| CVE-2026-55955 | Medium | 6.5 | Apache Tomcat | Improper authentication | — | — | 0.44% | Jun 29, 2026 |
| CVE-2026-55276 | Critical | 9.1 | Apache Tomcat | CWE-670 | — | — | 0.60% | Jun 29, 2026 |
| CVE-2026-53434 | Critical | 9.1 | Apache Tomcat | CWE-390 | — | — | 0.60% | Jun 29, 2026 |
| CVE-2026-53404 | High | 7.3 | Apache Tomcat | CWE-670 | — | — | 0.65% | Jun 29, 2026 |
| CVE-2026-50229 | Medium | 6.1 | Apache Tomcat | CWE-80 | — | — | 4.1% | Jun 29, 2026 |
