{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Critical" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"tomcat security update", "category":"general", "title":"Synopsis" }, { "text":"An update for tomcat is now available for openEuler-24.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.\n\nSecurity Fix(es):\n\nA missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.\n\n\n\nThe following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.(CVE-2026-101296)\n\nIncorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fixes the issue.(CVE-2026-101356)\n\nNot Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.26, from 10.1.22 through 10.1.60, from 9.0.92 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.(CVE-2026-74048)\n\nExecution After Redirect (EAR) vulnerability in Apache Tomcat.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue.(CVE-2026-74049)\n\nTime-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the same issue in the APR/Native connector.\n\n\n\nThis issue affects Apache Tomcat: from 9.0.47 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 9.0.123, which fixes the issue.(CVE-2026-80353)\n\nIncomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.(CVE-2026-88041)\n\nIncomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.(CVE-2026-93446)", "category":"general", "title":"Description" }, { "text":"An update for tomcat is now available for openEuler-24.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Critical", "category":"general", "title":"Severity" }, { "text":"tomcat", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-4534", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" }, { "summary":"CVE-2026-101296", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-101296&packageName=tomcat" }, { "summary":"CVE-2026-101356", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-101356&packageName=tomcat" }, { "summary":"CVE-2026-74048", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-74048&packageName=tomcat" }, { "summary":"CVE-2026-74049", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-74049&packageName=tomcat" }, { "summary":"CVE-2026-80353", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-80353&packageName=tomcat" }, { "summary":"CVE-2026-88041", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-88041&packageName=tomcat" }, { "summary":"CVE-2026-93446", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-93446&packageName=tomcat" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101296" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101356" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74048" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74049" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80353" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88041" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93446" }, { "summary":"openEuler-SA-2026-4534 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-4534.json" } ], "title":"An update for tomcat is now available for openEuler-24.03-LTS-SP4", "tracking":{ "initial_release_date":"2026-10-30T11:12:16+08:00", "revision_history":[ { "date":"2026-10-30T11:12:16+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-10-30T11:12:16+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-10-30T11:12:16+08:00", "id":"openEuler-SA-2026-4534", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"openEuler-24.03-LTS-SP4", "name":"openEuler-24.03-LTS-SP4" }, "name":"openEuler-24.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"tomcat-9.0.123-1.oe2403sp4.noarch.rpm", "name":"tomcat-9.0.123-1.oe2403sp4.noarch.rpm" }, "name":"tomcat-9.0.123-1.oe2403sp4.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"tomcat-help-9.0.123-1.oe2403sp4.noarch.rpm", "name":"tomcat-help-9.0.123-1.oe2403sp4.noarch.rpm" }, "name":"tomcat-help-9.0.123-1.oe2403sp4.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"tomcat-jsvc-9.0.123-1.oe2403sp4.noarch.rpm", "name":"tomcat-jsvc-9.0.123-1.oe2403sp4.noarch.rpm" }, "name":"tomcat-jsvc-9.0.123-1.oe2403sp4.noarch.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP4" }, "product_id":"tomcat-9.0.123-1.oe2403sp4.src.rpm", "name":"tomcat-9.0.123-1.oe2403sp4.src.rpm" }, "name":"tomcat-9.0.123-1.oe2403sp4.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP4", "product_reference":"tomcat-9.0.123-1.oe2403sp4.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "name":"tomcat-9.0.123-1.oe2403sp4.noarch as a component of openEuler-24.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP4", "product_reference":"tomcat-help-9.0.123-1.oe2403sp4.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "name":"tomcat-help-9.0.123-1.oe2403sp4.noarch as a component of openEuler-24.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP4", "product_reference":"tomcat-jsvc-9.0.123-1.oe2403sp4.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "name":"tomcat-jsvc-9.0.123-1.oe2403sp4.noarch as a component of openEuler-24.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP4", "product_reference":"tomcat-9.0.123-1.oe2403sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src", "name":"tomcat-9.0.123-1.oe2403sp4.src as a component of openEuler-24.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-101296", "notes":[ { "text":"A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.\n\n\n\nThe following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-101296" }, { "cve":"CVE-2026-101356", "notes":[ { "text":"Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-101356" }, { "cve":"CVE-2026-74048", "notes":[ { "text":"Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.26, from 10.1.22 through 10.1.60, from 9.0.92 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-74048" }, { "cve":"CVE-2026-74049", "notes":[ { "text":"Execution After Redirect (EAR) vulnerability in Apache Tomcat.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61, 9.0.123, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-74049" }, { "cve":"CVE-2026-80353", "notes":[ { "text":"Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to access the unix domain socket. The fix for CVE-2026-65183 only addressed the NIO connector. It did not address the same issue in the APR/Native connector.\n\n\n\nThis issue affects Apache Tomcat: from 9.0.47 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 9.0.123, which fixes the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.1, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-80353" }, { "cve":"CVE-2026-88041", "notes":[ { "text":"Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.26, from 10.1.27 through 10.1.60, from 9.0.92 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-88041" }, { "cve":"CVE-2026-93446", "notes":[ { "text":"Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from 10.1.25 through 10.1.60, from 9.0.90 through 9.0.122.\n\n\n\nUsers are recommended to upgrade to version 11.0.27, 10.1.61 or 9.0.123, which fix the issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ], "details":"tomcat security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4534" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-help-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-jsvc-9.0.123-1.oe2403sp4.noarch", "openEuler-24.03-LTS-SP4:tomcat-9.0.123-1.oe2403sp4.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-93446" } ] }