The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation.…
Apache Tomcat released versions 11.0.21, 10.1.54, and 9.0.117 to fix CVE-2026-34486, a missing encryption vulnerability.
At the Gartner Security & Risk Management Summit, Zur Ulianitzky, SVP Product and Security Research at XM Cyber, detailed how attackers are…
CVE-2025-24813 is a remote code execution flaw in Apache Tomcat disclosed in March 2025 and added to CISA's Known Exploited Vulnerabilities catalog.…
Apache Tomcat is a widely used open-source web server and servlet container, affected by CVE-2026-34486.