[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-24734":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":553,"aliases":554,"duplicate_of":9,"upstream":559,"downstream":560,"duplicates":601,"related":602,"reserved_at":9,"published_at":617,"modified_at":618,"state":619,"summary":620,"references_raw":629,"kevs":708,"epss":709,"epss_history":712,"metrics":983,"affected":1001},"CVE-2026-24734","Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat.\n\nWhen using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypassed.\n\nThis issue affects Apache Tomcat Native:  from 1.3.0 through 1.3.4, from 2.0.0 through 2.0.11; Apache Tomcat: from 11.0.0-M1 through 11.0.17, from 10.1.0-M7 through 10.1.51, from 9.0.83 through 9.0.114.\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39. Older EOL versions are not affected.\n\nApache Tomcat Native users are recommended to upgrade to versions 1.3.5 or later or 2.0.12 or later, which fix the issue.\n\nApache Tomcat users are recommended to upgrade to versions 11.0.18 or later, 10.1.52 or later or 9.0.115 or later which fix the issue.",null,[11,531,538],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-20","Improper Input Validation","The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,232,236,240,244,248,252,256,260,264,268,272,276,280,284,325,329,333,381,385,389,393,397,401,451,455,459,463,467,471,475,479,483,487,491,495,499,503,507,511,515,519,523,527],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-101","Server Side Include (SSI) Injection",[],{"id":29,"name":30,"techniques":31},"CAPEC-104","Cross Zone Scripting",[],{"id":33,"name":34,"techniques":35},"CAPEC-108","Command Line Execution through SQL Injection",[],{"id":37,"name":38,"techniques":39},"CAPEC-109","Object Relational Mapping Injection",[],{"id":41,"name":42,"techniques":43},"CAPEC-110","SQL Injection through SOAP Parameter Tampering",[],{"id":45,"name":46,"techniques":47},"CAPEC-120","Double Encoding",[],{"id":49,"name":50,"techniques":51},"CAPEC-13","Subverting Environment Variable Values",[52,150,192],{"id":53,"name":54,"tactics":55,"countermeasures":62},"T1562.003","Impair Command History Logging",[56,59],{"id":57,"name":58},"TA0030","Defense Evasion",{"id":60,"name":61},"TA0005","Stealth",[63,68,73,78,82,86,91,95,100,105,109,113,117,121,125,129,133,137,142,146],{"id":64,"name":65,"tactic":66},"D3-EFA","Emulated File Analysis",{"name":67},"Detect",{"id":69,"name":70,"tactic":71},"D3-DF","Decoy File",{"name":72},"Deceive",{"id":74,"name":75,"tactic":76},"D3-CM","Content Modification",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-EAL","Executable Allowlisting",{"name":77},{"id":83,"name":84,"tactic":85},"D3-CF","Content Filtering",{"name":77},{"id":87,"name":88,"tactic":89},"D3-RKD","Registry Key Deletion",{"name":90},"Evict",{"id":92,"name":93,"tactic":94},"D3-EDL","Executable Denylisting",{"name":77},{"id":96,"name":97,"tactic":98},"D3-FE","File Encryption",{"name":99},"Harden",{"id":101,"name":102,"tactic":103},"D3-CI","Configuration Inventory",{"name":104},"Model",{"id":106,"name":107,"tactic":108},"D3-DRA","Disable Remote Access",{"name":99},{"id":110,"name":111,"tactic":112},"D3-CQ","Content Quarantine",{"name":77},{"id":114,"name":115,"tactic":116},"D3-RFAM","Remote File Access Mediation",{"name":77},{"id":118,"name":119,"tactic":120},"D3-FA","File Analysis",{"name":67},{"id":122,"name":123,"tactic":124},"D3-FIM","File Integrity Monitoring",{"name":67},{"id":126,"name":127,"tactic":128},"D3-LFP","Local File Permissions",{"name":77},{"id":130,"name":131,"tactic":132},"D3-ACH","Application Configuration Hardening",{"name":99},{"id":134,"name":135,"tactic":136},"D3-DA","Dynamic Analysis",{"name":67},{"id":138,"name":139,"tactic":140},"D3-RC","Restore Configuration",{"name":141},"Restore",{"id":143,"name":144,"tactic":145},"D3-FEV","File Eviction",{"name":90},{"id":147,"name":148,"tactic":149},"D3-RF","Restore File",{"name":141},{"id":151,"name":152,"tactics":153,"countermeasures":165},"T1574.006","Dynamic Linker Hijacking",[154,157,160,161,162],{"id":155,"name":156},"TA0110","Persistence",{"id":158,"name":159},"TA0111","Privilege Escalation",{"id":57,"name":58},{"id":60,"name":61},{"id":163,"name":164},"TA0104","Execution",[166,168,170,172,174,176,178,182,184,186,188,190],{"id":122,"name":123,"tactic":167},{"name":67},{"id":74,"name":75,"tactic":169},{"name":77},{"id":96,"name":97,"tactic":171},{"name":99},{"id":143,"name":144,"tactic":173},{"name":90},{"id":69,"name":70,"tactic":175},{"name":72},{"id":147,"name":148,"tactic":177},{"name":141},{"id":179,"name":180,"tactic":181},"D3-SFA","System File Analysis",{"name":67},{"id":83,"name":84,"tactic":183},{"name":77},{"id":126,"name":127,"tactic":185},{"name":77},{"id":114,"name":115,"tactic":187},{"name":77},{"id":118,"name":119,"tactic":189},{"name":67},{"id":110,"name":111,"tactic":191},{"name":77},{"id":193,"name":194,"tactics":195,"countermeasures":201},"T1574.007","Path Interception by PATH Environment Variable",[196,197,198,199,200],{"id":155,"name":156},{"id":158,"name":159},{"id":57,"name":58},{"id":60,"name":61},{"id":163,"name":164},[202,204,206,208,210,212,214,216,218,220,222,224,226,228,230],{"id":64,"name":65,"tactic":203},{"name":67},{"id":69,"name":70,"tactic":205},{"name":72},{"id":147,"name":148,"tactic":207},{"name":141},{"id":96,"name":97,"tactic":209},{"name":99},{"id":118,"name":119,"tactic":211},{"name":67},{"id":134,"name":135,"tactic":213},{"name":67},{"id":83,"name":84,"tactic":215},{"name":77},{"id":126,"name":127,"tactic":217},{"name":77},{"id":122,"name":123,"tactic":219},{"name":67},{"id":114,"name":115,"tactic":221},{"name":77},{"id":110,"name":111,"tactic":223},{"name":77},{"id":74,"name":75,"tactic":225},{"name":77},{"id":79,"name":80,"tactic":227},{"name":77},{"id":92,"name":93,"tactic":229},{"name":77},{"id":143,"name":144,"tactic":231},{"name":90},{"id":233,"name":234,"techniques":235},"CAPEC-135","Format String Injection",[],{"id":237,"name":238,"techniques":239},"CAPEC-136","LDAP Injection",[],{"id":241,"name":242,"techniques":243},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":245,"name":246,"techniques":247},"CAPEC-153","Input Data Manipulation",[],{"id":249,"name":250,"techniques":251},"CAPEC-182","Flash Injection",[],{"id":253,"name":254,"techniques":255},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":257,"name":258,"techniques":259},"CAPEC-22","Exploiting Trust in Client",[],{"id":261,"name":262,"techniques":263},"CAPEC-23","File Content Injection",[],{"id":265,"name":266,"techniques":267},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":269,"name":270,"techniques":271},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":273,"name":274,"techniques":275},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":277,"name":278,"techniques":279},"CAPEC-250","XML Injection",[],{"id":281,"name":282,"techniques":283},"CAPEC-261","Fuzzing for garnering other adjacent user/sensitive data",[],{"id":285,"name":286,"techniques":287},"CAPEC-267","Leverage Alternate Encoding",[288],{"id":289,"name":290,"tactics":291,"countermeasures":294},"T1027","Obfuscated Files or Information",[292,293],{"id":57,"name":58},{"id":60,"name":61},[295,297,299,301,303,305,307,309,311,313,315,317,319,321,323],{"id":110,"name":111,"tactic":296},{"name":77},{"id":143,"name":144,"tactic":298},{"name":90},{"id":96,"name":97,"tactic":300},{"name":99},{"id":79,"name":80,"tactic":302},{"name":77},{"id":92,"name":93,"tactic":304},{"name":77},{"id":147,"name":148,"tactic":306},{"name":141},{"id":69,"name":70,"tactic":308},{"name":72},{"id":114,"name":115,"tactic":310},{"name":77},{"id":134,"name":135,"tactic":312},{"name":67},{"id":122,"name":123,"tactic":314},{"name":67},{"id":83,"name":84,"tactic":316},{"name":77},{"id":64,"name":65,"tactic":318},{"name":67},{"id":126,"name":127,"tactic":320},{"name":77},{"id":118,"name":119,"tactic":322},{"name":67},{"id":74,"name":75,"tactic":324},{"name":77},{"id":326,"name":327,"techniques":328},"CAPEC-28","Fuzzing",[],{"id":330,"name":331,"techniques":332},"CAPEC-3","Using Leading 'Ghost' Character Sequences to Bypass Input Filters",[],{"id":334,"name":335,"techniques":336},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[337],{"id":338,"name":339,"tactics":340,"countermeasures":344},"T1539","Steal Web Session Cookie",[341],{"id":342,"name":343},"TA0031","Credential Access",[345,349,353,357,361,365,369,373,377],{"id":346,"name":347,"tactic":348},"D3-CCSA","Credential Compromise Scope Analysis",{"name":67},{"id":350,"name":351,"tactic":352},"D3-RIC","Reissue Credential",{"name":141},{"id":354,"name":355,"tactic":356},"D3-CRO","Credential Rotation",{"name":99},{"id":358,"name":359,"tactic":360},"D3-ANCI","Authentication Cache Invalidation",{"name":90},{"id":362,"name":363,"tactic":364},"D3-CR","Credential Revocation",{"name":90},{"id":366,"name":367,"tactic":368},"D3-DUC","Decoy User Credential",{"name":72},{"id":370,"name":371,"tactic":372},"D3-CTS","Credential Transmission Scoping",{"name":77},{"id":374,"name":375,"tactic":376},"D3-CH","Credential Hardening",{"name":99},{"id":378,"name":379,"tactic":380},"D3-MFA","Multi-factor Authentication",{"name":99},{"id":382,"name":383,"techniques":384},"CAPEC-42","MIME Conversion",[],{"id":386,"name":387,"techniques":388},"CAPEC-43","Exploiting Multiple Input Interpretation Layers",[],{"id":390,"name":391,"techniques":392},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":394,"name":395,"techniques":396},"CAPEC-46","Overflow Variables and Tags",[],{"id":398,"name":399,"techniques":400},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":402,"name":403,"techniques":404},"CAPEC-473","Signature Spoof",[405,442],{"id":406,"name":407,"tactics":408,"countermeasures":411},"T1036.001","Invalid Code Signature",[409,410],{"id":57,"name":58},{"id":60,"name":61},[412,414,416,418,420,422,424,426,428,430,432,434,436,438,440],{"id":92,"name":93,"tactic":413},{"name":77},{"id":134,"name":135,"tactic":415},{"name":67},{"id":143,"name":144,"tactic":417},{"name":90},{"id":69,"name":70,"tactic":419},{"name":72},{"id":83,"name":84,"tactic":421},{"name":77},{"id":79,"name":80,"tactic":423},{"name":77},{"id":118,"name":119,"tactic":425},{"name":67},{"id":126,"name":127,"tactic":427},{"name":77},{"id":74,"name":75,"tactic":429},{"name":77},{"id":147,"name":148,"tactic":431},{"name":141},{"id":64,"name":65,"tactic":433},{"name":67},{"id":110,"name":111,"tactic":435},{"name":77},{"id":114,"name":115,"tactic":437},{"name":77},{"id":96,"name":97,"tactic":439},{"name":99},{"id":122,"name":123,"tactic":441},{"name":67},{"id":443,"name":444,"tactics":445,"countermeasures":450},"T1553.002","Code Signing",[446,447],{"id":57,"name":58},{"id":448,"name":449},"TA0112","Defense Impairment",[],{"id":452,"name":453,"techniques":454},"CAPEC-52","Embedding NULL Bytes",[],{"id":456,"name":457,"techniques":458},"CAPEC-53","Postfix, Null Terminate, and Backslash",[],{"id":460,"name":461,"techniques":462},"CAPEC-588","DOM-Based XSS",[],{"id":464,"name":465,"techniques":466},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":468,"name":469,"techniques":470},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":472,"name":473,"techniques":474},"CAPEC-664","Server Side Request Forgery",[],{"id":476,"name":477,"techniques":478},"CAPEC-67","String Format Overflow in syslog()",[],{"id":480,"name":481,"techniques":482},"CAPEC-7","Blind SQL Injection",[],{"id":484,"name":485,"techniques":486},"CAPEC-71","Using Unicode Encoding to Bypass Validation Logic",[],{"id":488,"name":489,"techniques":490},"CAPEC-72","URL Encoding",[],{"id":492,"name":493,"techniques":494},"CAPEC-73","User-Controlled Filename",[],{"id":496,"name":497,"techniques":498},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":500,"name":501,"techniques":502},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"id":504,"name":505,"techniques":506},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":508,"name":509,"techniques":510},"CAPEC-80","Using UTF-8 Encoding to Bypass Validation Logic",[],{"id":512,"name":513,"techniques":514},"CAPEC-81","Web Server Logs Tampering",[],{"id":516,"name":517,"techniques":518},"CAPEC-83","XPath Injection",[],{"id":520,"name":521,"techniques":522},"CAPEC-85","AJAX Footprinting",[],{"id":524,"name":525,"techniques":526},"CAPEC-88","OS Command Injection",[],{"id":528,"name":529,"techniques":530},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],{"_key":532,"id":532,"name":533,"description":534,"type":535,"status":536,"abstraction":9,"likelihood_of_exploit":9,"capec":537},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],{"_key":539,"id":539,"name":540,"description":541,"type":15,"status":542,"abstraction":543,"likelihood_of_exploit":9,"capec":544},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","Draft","Base",[545,549],{"id":546,"name":547,"techniques":548},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":550,"name":551,"techniques":552},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[555,556,557,558],"GHSA-mgp5-rv84-w37q","BIT-tomcat-2026-24734","UBUNTU-CVE-2026-24734","DEBIAN-CVE-2026-24734",[],[561,563,565,567,569,571,573,575,577,579,581,583,585,587,588,589,591,593,595,597,599],{"_key":562},"DSA-6120-1",{"_key":564},"SUSE-SU-2026:0877-1",{"_key":566},"OPENSUSE-SU-2026:10305-1",{"_key":568},"OPENSUSE-SU-2026:10306-1",{"_key":570},"OPENSUSE-SU-2026:10307-1",{"_key":572},"SUSE-SU-2026:0890-1",{"_key":574},"SUSE-SU-2026:0932-1",{"_key":576},"OPENSUSE-SU-2026:20350-1",{"_key":578},"OPENSUSE-SU-2026:20414-1",{"_key":580},"SUSE-SU-2026:20926-1",{"_key":582},"OPENSUSE-SU-2026:20444-1",{"_key":584},"SUSE-SU-2026:20982-1",{"_key":586},"MGASA-2026-0056",{"_key":558},{"_key":557},{"_key":590},"RHSA-2026:19054",{"_key":592},"RHSA-2026:26323",{"_key":594},"RHSA-2026:5611",{"_key":596},"RHSA-2026:36790",{"_key":598},"RHSA-2026:6569",{"_key":600},"RHSA-2026:8334",[],[603,604,605,606,607,608,609,610,611,612,613,614,615],{"_key":564},{"_key":566},{"_key":568},{"_key":570},{"_key":572},{"_key":574},{"_key":576},{"_key":578},{"_key":580},{"_key":582},{"_key":584},{"_key":586},{"_key":616},"CGA-JHGM-FWMV-JCHQ","2026-02-17T18:53:12.228Z","2026-07-15T13:48:07.714Z","Modified",{"cisa_kev":621,"cisa_ransomware":621,"cisa_vendor":9,"epss_severity":622,"epss_score":623,"severity":624,"severity_score":625,"severity_version":626,"severity_source":627,"severity_vector":628,"severity_status":619},false,"low",0.00498,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[630,642,647,652,658,662,667,671,675,679,683,687,691,695,699,703],{"url":631,"sources":632,"tags":636},"https://lists.apache.org/thread/292dlmx3fz1888v6v16221kpozq56gml",[633,627,634,635],"cve.org","osv_maven","osv_ubuntu",[637,638,639,640,641],"Vendor Advisory","Issue Tracking","Mailing List","WEB","REPORT",{"url":643,"sources":644,"tags":645},"https://nvd.nist.gov/vuln/detail/CVE-2026-24734",[634],[646],"Advisory",{"url":648,"sources":649,"tags":650},"https://github.com/apache/tomcat",[634],[651],"PACKAGE",{"url":653,"sources":654,"tags":655},"https://access.redhat.com/security/cve/CVE-2026-24734",[633,627],[656,657],"VDB Entry","X Refsource REDHAT",{"url":659,"sources":660,"tags":661},"https://bugzilla.redhat.com/show_bug.cgi?id=2440426",[633,627],[638,657],{"url":663,"sources":664,"tags":665},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24734.json",[633,627],[666],"X Sadp Csaf Vex",{"url":668,"sources":669,"tags":670},"https://access.redhat.com/errata/RHSA-2026:5611",[633,627],[637,657],{"url":672,"sources":673,"tags":674},"https://access.redhat.com/errata/RHSA-2026:19054",[633,627],[637,657],{"url":676,"sources":677,"tags":678},"https://access.redhat.com/errata/RHSA-2026:26323",[633,627],[637,657],{"url":680,"sources":681,"tags":682},"https://access.redhat.com/errata/RHSA-2026:8334",[633,627],[637,657],{"url":684,"sources":685,"tags":686},"https://access.redhat.com/errata/RHSA-2026:6569",[633,627],[637,657],{"url":688,"sources":689,"tags":690},"https://access.redhat.com/errata/RHSA-2026:5612",[633,627],[637,657],{"url":692,"sources":693,"tags":694},"https://access.redhat.com/errata/RHSA-2026:36790",[633,627],[637,657],{"url":696,"sources":697,"tags":698},"https://ubuntu.com/security/CVE-2026-24734",[635],[641],{"url":700,"sources":701,"tags":702},"https://www.cve.org/CVERecord?id=CVE-2026-24734",[635],[641],{"url":704,"sources":705,"tags":707},"https://security-tracker.debian.org/tracker/CVE-2026-24734",[706],"osv_debian",[646],[],{"date":710,"score":623,"percentile":711},"2026-08-22",0.40737,[713,717,720,723,726,728,732,735,738,741,744,747,750,753,756,759,762,765,768,771,774,776,779,783,786,789,792,795,798,801,804,807,811,814,817,820,823,826,829,832,835,838,841,844,847,850,853,856,859,862,865,868,871,874,876,879,882,885,888,891,894,897,900,903,906,908,911,914,918,921,924,927,930,933,936,939,942,945,948,951,954,957,959,962,965,968,971,974,977,980],{"date":714,"score":715,"percentile":716},"2026-02-18",0.00021,0.05315,{"date":718,"score":715,"percentile":719},"2026-02-19",0.05383,{"date":721,"score":715,"percentile":722},"2026-02-20",0.0534,{"date":724,"score":715,"percentile":725},"2026-02-21",0.05342,{"date":727,"score":715,"percentile":722},"2026-02-22",{"date":729,"score":730,"percentile":731},"2026-02-23",0.00026,0.07007,{"date":733,"score":730,"percentile":734},"2026-02-24",0.06992,{"date":736,"score":730,"percentile":737},"2026-02-25",0.06924,{"date":739,"score":730,"percentile":740},"2026-02-26",0.06867,{"date":742,"score":730,"percentile":743},"2026-02-27",0.06886,{"date":745,"score":730,"percentile":746},"2026-02-28",0.06894,{"date":748,"score":730,"percentile":749},"2026-03-01",0.06947,{"date":751,"score":730,"percentile":752},"2026-03-02",0.06844,{"date":754,"score":730,"percentile":755},"2026-03-03",0.06852,{"date":757,"score":730,"percentile":758},"2026-03-04",0.06773,{"date":760,"score":730,"percentile":761},"2026-03-05",0.06799,{"date":763,"score":730,"percentile":764},"2026-03-06",0.06783,{"date":766,"score":730,"percentile":767},"2026-03-07",0.06786,{"date":769,"score":730,"percentile":770},"2026-03-08",0.06751,{"date":772,"score":730,"percentile":773},"2026-03-09",0.06716,{"date":775,"score":730,"percentile":773},"2026-03-10",{"date":777,"score":730,"percentile":778},"2026-03-11",0.06737,{"date":780,"score":781,"percentile":782},"2026-03-12",0.00098,0.26857,{"date":784,"score":781,"percentile":785},"2026-03-13",0.26898,{"date":787,"score":781,"percentile":788},"2026-03-14",0.26891,{"date":790,"score":781,"percentile":791},"2026-03-15",0.26819,{"date":793,"score":781,"percentile":794},"2026-03-16",0.26823,{"date":796,"score":781,"percentile":797},"2026-03-17",0.26798,{"date":799,"score":781,"percentile":800},"2026-03-18",0.26784,{"date":802,"score":781,"percentile":803},"2026-03-19",0.26786,{"date":805,"score":781,"percentile":806},"2026-03-20",0.26841,{"date":808,"score":809,"percentile":810},"2026-03-21",0.00109,0.29193,{"date":812,"score":809,"percentile":813},"2026-03-22",0.29176,{"date":815,"score":809,"percentile":816},"2026-03-23",0.29158,{"date":818,"score":809,"percentile":819},"2026-03-24",0.29153,{"date":821,"score":809,"percentile":822},"2026-03-25",0.29202,{"date":824,"score":809,"percentile":825},"2026-03-26",0.2925,{"date":827,"score":809,"percentile":828},"2026-03-27",0.29272,{"date":830,"score":809,"percentile":831},"2026-03-28",0.29296,{"date":833,"score":809,"percentile":834},"2026-03-29",0.29263,{"date":836,"score":809,"percentile":837},"2026-03-30",0.29247,{"date":839,"score":809,"percentile":840},"2026-03-31",0.29233,{"date":842,"score":809,"percentile":843},"2026-04-01",0.2924,{"date":845,"score":809,"percentile":846},"2026-04-02",0.29315,{"date":848,"score":809,"percentile":849},"2026-04-03",0.2933,{"date":851,"score":809,"percentile":852},"2026-04-04",0.29363,{"date":854,"score":809,"percentile":855},"2026-04-05",0.29317,{"date":857,"score":809,"percentile":858},"2026-04-06",0.29171,{"date":860,"score":809,"percentile":861},"2026-04-07",0.29175,{"date":863,"score":809,"percentile":864},"2026-04-08",0.29239,{"date":866,"score":809,"percentile":867},"2026-04-09",0.29279,{"date":869,"score":809,"percentile":870},"2026-04-10",0.29299,{"date":872,"score":809,"percentile":873},"2026-04-11",0.29285,{"date":875,"score":809,"percentile":864},"2026-04-12",{"date":877,"score":809,"percentile":878},"2026-04-13",0.29186,{"date":880,"score":809,"percentile":881},"2026-04-14",0.29174,{"date":883,"score":809,"percentile":884},"2026-04-15",0.29238,{"date":886,"score":809,"percentile":887},"2026-04-16",0.29213,{"date":889,"score":809,"percentile":890},"2026-04-17",0.29204,{"date":892,"score":809,"percentile":893},"2026-04-18",0.29188,{"date":895,"score":809,"percentile":896},"2026-04-19",0.29147,{"date":898,"score":809,"percentile":899},"2026-04-20",0.29135,{"date":901,"score":809,"percentile":902},"2026-04-21",0.29143,{"date":904,"score":809,"percentile":905},"2026-04-22",0.29189,{"date":907,"score":809,"percentile":905},"2026-04-23",{"date":909,"score":809,"percentile":910},"2026-04-24",0.29021,{"date":912,"score":809,"percentile":913},"2026-04-25",0.28936,{"date":915,"score":916,"percentile":917},"2026-04-26",0.00094,0.26007,{"date":919,"score":916,"percentile":920},"2026-04-27",0.25997,{"date":922,"score":916,"percentile":923},"2026-04-28",0.25942,{"date":925,"score":916,"percentile":926},"2026-04-29",0.25958,{"date":928,"score":916,"percentile":929},"2026-04-30",0.25939,{"date":931,"score":916,"percentile":932},"2026-05-01",0.25946,{"date":934,"score":916,"percentile":935},"2026-05-02",0.25985,{"date":937,"score":916,"percentile":938},"2026-05-03",0.25934,{"date":940,"score":916,"percentile":941},"2026-05-04",0.25887,{"date":943,"score":916,"percentile":944},"2026-05-05",0.2585,{"date":946,"score":916,"percentile":947},"2026-05-06",0.25844,{"date":949,"score":916,"percentile":950},"2026-05-07",0.2591,{"date":952,"score":916,"percentile":953},"2026-05-08",0.25914,{"date":955,"score":916,"percentile":956},"2026-05-09",0.25966,{"date":958,"score":916,"percentile":938},"2026-05-10",{"date":960,"score":916,"percentile":961},"2026-05-11",0.25894,{"date":963,"score":916,"percentile":964},"2026-05-12",0.25912,{"date":966,"score":916,"percentile":967},"2026-05-13",0.25965,{"date":969,"score":916,"percentile":970},"2026-05-14",0.25991,{"date":972,"score":916,"percentile":973},"2026-05-15",0.26017,{"date":975,"score":916,"percentile":976},"2026-05-16",0.26008,{"date":978,"score":916,"percentile":979},"2026-05-17",0.25954,{"date":981,"score":916,"percentile":982},"2026-05-18",0.25892,[984,991,995,997,999],{"source":633,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":985,"cvss_v4_0":9},{"baseScore":986,"baseSeverity":987,"vectorString":988,"impactScore":989,"exploitabilityScore":990},7.4,"HIGH","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",8.7,5.6,{"source":627,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":992,"cvss_v4_0":9},{"baseScore":625,"baseSeverity":987,"vectorString":628,"impactScore":993,"exploitabilityScore":994},6,10,{"source":634,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":996,"cvss_v4_0":9},{"baseScore":625,"baseSeverity":9,"vectorString":628,"impactScore":993,"exploitabilityScore":994},{"source":635,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":998,"cvss_v4_0":9},{"baseScore":986,"baseSeverity":9,"vectorString":988,"impactScore":989,"exploitabilityScore":990},{"source":706,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1000,"cvss_v4_0":9},{"baseScore":625,"baseSeverity":9,"vectorString":628,"impactScore":993,"exploitabilityScore":994},[1002,1022,1042,1152,1162,1178,1187,1196,1204,1207,1210,1223],{"ecosystem":9,"name":1003,"vendor":1004,"product":1005,"cpe_part":1006,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1007},"Apache Tomcat","apache software foundation","apache tomcat","a",[1008,1014,1018],{"version":1009,"is_range":1010,"range_type":633,"version_start":1011,"version_start_type":1012,"version_end":1013,"version_end_type":1012,"fixed_in":9},">= 11.0.0-M1, \u003C= 11.0.17",true,"11.0.0-M1","including","11.0.17",{"version":1015,"is_range":1010,"range_type":633,"version_start":1016,"version_start_type":1012,"version_end":1017,"version_end_type":1012,"fixed_in":9},">= 10.1.0-M7, \u003C= 10.1.51","10.1.0-M7","10.1.51",{"version":1019,"is_range":1010,"range_type":633,"version_start":1020,"version_start_type":1012,"version_end":1021,"version_end_type":1012,"fixed_in":9},">= 9.0.83, \u003C= 9.0.114","9.0.83","9.0.114",{"ecosystem":9,"name":1023,"vendor":1004,"product":1024,"cpe_part":1006,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1025},"Apache Tomcat Native","apache tomcat native",[1026,1030,1034,1038],{"version":1027,"is_range":1010,"range_type":633,"version_start":1028,"version_start_type":1012,"version_end":1029,"version_end_type":1012,"fixed_in":9},">= 1.1.23, \u003C= 1.1.34","1.1.23","1.1.34",{"version":1031,"is_range":1010,"range_type":633,"version_start":1032,"version_start_type":1012,"version_end":1033,"version_end_type":1012,"fixed_in":9},">= 1.2.0, \u003C= 1.2.39","1.2.0","1.2.39",{"version":1035,"is_range":1010,"range_type":633,"version_start":1036,"version_start_type":1012,"version_end":1037,"version_end_type":1012,"fixed_in":9},">= 1.3.0, \u003C= 1.3.4","1.3.0","1.3.4",{"version":1039,"is_range":1010,"range_type":633,"version_start":1040,"version_start_type":1012,"version_end":1041,"version_end_type":1012,"fixed_in":9},">= 2.0.0, \u003C= 2.0.11","2.0.0","2.0.11",{"ecosystem":9,"name":1043,"vendor":1044,"product":1045,"cpe_part":1006,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1046},"Tomcat","apache","tomcat",[1047,1052,1056,1060,1062,1064,1066,1068,1070,1072,1074,1076,1078,1080,1082,1084,1086,1088,1090,1092,1094,1096,1098,1100,1102,1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124,1126,1128,1130,1132,1134,1136,1138,1140,1142,1144,1146,1148,1150],{"version":1048,"is_range":1010,"range_type":1049,"version_start":1020,"version_start_type":1012,"version_end":1050,"version_end_type":1051,"fixed_in":9},"gte9.0.83_lt9.0.115","cpe","9.0.115","excluding",{"version":1053,"is_range":1010,"range_type":1049,"version_start":1054,"version_start_type":1012,"version_end":1055,"version_end_type":1051,"fixed_in":9},"gte10.1.1_lt10.1.52","10.1.1","10.1.52",{"version":1057,"is_range":1010,"range_type":1049,"version_start":1058,"version_start_type":1012,"version_end":1059,"version_end_type":1051,"fixed_in":9},"gte11.0.1_lt11.0.18","11.0.1","11.0.18",{"version":1061,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone1",{"version":1063,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone10",{"version":1065,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone11",{"version":1067,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone12",{"version":1069,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone13",{"version":1071,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone14",{"version":1073,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone15",{"version":1075,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone16",{"version":1077,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone17",{"version":1079,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone18",{"version":1081,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone19",{"version":1083,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone2",{"version":1085,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone20",{"version":1087,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone3",{"version":1089,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone4",{"version":1091,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone5",{"version":1093,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone6",{"version":1095,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone7",{"version":1097,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone8",{"version":1099,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone9",{"version":1101,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone1",{"version":1103,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone10",{"version":1105,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone11",{"version":1107,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone12",{"version":1109,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone13",{"version":1111,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone14",{"version":1113,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone15",{"version":1115,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone16",{"version":1117,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone17",{"version":1119,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone18",{"version":1121,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone19",{"version":1123,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone2",{"version":1125,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone20",{"version":1127,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone21",{"version":1129,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone22",{"version":1131,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone23",{"version":1133,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone24",{"version":1135,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone25",{"version":1137,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone26",{"version":1139,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone3",{"version":1141,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone4",{"version":1143,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone5",{"version":1145,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone6",{"version":1147,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone7",{"version":1149,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone8",{"version":1151,"is_range":621,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0.0:milestone9",{"ecosystem":9,"name":1153,"vendor":1044,"product":1154,"cpe_part":1006,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1155},"tomcat native","tomcat_native",[1156,1159],{"version":1157,"is_range":1010,"range_type":1049,"version_start":1036,"version_start_type":1012,"version_end":1158,"version_end_type":1051,"fixed_in":9},"gte1.3.0_lt1.3.5","1.3.5",{"version":1160,"is_range":1010,"range_type":1049,"version_start":1040,"version_start_type":1012,"version_end":1161,"version_end_type":1051,"fixed_in":9},"gte2.0.0_lt2.0.12","2.0.12",{"ecosystem":1163,"name":1164,"vendor":1165,"product":1164,"cpe_part":9,"purl_type":1166,"purl_namespace":1165,"purl_name":1164,"source":9,"versions":1167},"Debian","tomcat10","debian","deb",[1168,1172,1175],{"version":1169,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1171,"version_end_type":1051,"fixed_in":9},"lt10_1_52_1~deb12u1","ecosystem","10.1.52-1~deb12u1",{"version":1173,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1174,"version_end_type":1051,"fixed_in":9},"lt10_1_52_1~deb13u1","10.1.52-1~deb13u1",{"version":1176,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1177,"version_end_type":1051,"fixed_in":9},"lt10_1_52_1","10.1.52-1",{"ecosystem":1163,"name":1179,"vendor":1165,"product":1179,"cpe_part":9,"purl_type":1166,"purl_namespace":1165,"purl_name":1179,"source":9,"versions":1180},"tomcat11",[1181,1184],{"version":1182,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1183,"version_end_type":1051,"fixed_in":9},"lt11_0_22_1~deb13u1","11.0.22-1~deb13u1",{"version":1185,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1186,"version_end_type":1051,"fixed_in":9},"lt11_0_18_1","11.0.18-1",{"ecosystem":1163,"name":1188,"vendor":1165,"product":1188,"cpe_part":9,"purl_type":1166,"purl_namespace":1165,"purl_name":1188,"source":9,"versions":1189},"tomcat9",[1190,1193,1194,1195],{"version":1191,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1051,"fixed_in":9},"lt9_0_70_2","9.0.70-2",{"version":1191,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1051,"fixed_in":9},{"version":1191,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1051,"fixed_in":9},{"version":1191,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1051,"fixed_in":9},{"ecosystem":1197,"name":1164,"vendor":1198,"product":1164,"cpe_part":9,"purl_type":1166,"purl_namespace":1198,"purl_name":1164,"source":9,"versions":1199},"Ubuntu","ubuntu",[1200,1202,1203],{"version":1201,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":1201,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1201,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1197,"name":1179,"vendor":1198,"product":1179,"cpe_part":9,"purl_type":1166,"purl_namespace":1198,"purl_name":1179,"source":9,"versions":1205},[1206],{"version":1201,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1197,"name":1188,"vendor":1198,"product":1188,"cpe_part":9,"purl_type":1166,"purl_namespace":1198,"purl_name":1188,"source":9,"versions":1208},[1209],{"version":1201,"is_range":1010,"range_type":1170,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1211,"name":1212,"vendor":1213,"product":1214,"cpe_part":9,"purl_type":1215,"purl_namespace":1213,"purl_name":1214,"source":9,"versions":1216},"Maven","org.apache.tomcat:tomcat-coyote","org.apache.tomcat","tomcat-coyote","maven",[1217,1219,1221],{"version":1218,"is_range":1010,"range_type":1170,"version_start":1011,"version_start_type":1012,"version_end":1059,"version_end_type":1051,"fixed_in":9},"gte11_0_0_M1_lt11_0_18",{"version":1220,"is_range":1010,"range_type":1170,"version_start":1016,"version_start_type":1012,"version_end":1055,"version_end_type":1051,"fixed_in":9},"gte10_1_0_M7_lt10_1_52",{"version":1222,"is_range":1010,"range_type":1170,"version_start":1020,"version_start_type":1012,"version_end":1050,"version_end_type":1051,"fixed_in":9},"gte9_0_83_lt9_0_115",{"ecosystem":1211,"name":1224,"vendor":1225,"product":1226,"cpe_part":9,"purl_type":1215,"purl_namespace":1225,"purl_name":1226,"source":9,"versions":1227},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[1228,1229,1230],{"version":1218,"is_range":1010,"range_type":1170,"version_start":1011,"version_start_type":1012,"version_end":1059,"version_end_type":1051,"fixed_in":9},{"version":1220,"is_range":1010,"range_type":1170,"version_start":1016,"version_start_type":1012,"version_end":1055,"version_end_type":1051,"fixed_in":9},{"version":1222,"is_range":1010,"range_type":1170,"version_start":1020,"version_start_type":1012,"version_end":1050,"version_end_type":1051,"fixed_in":9}]