RHSA-2026:68660: tomcat Red Hat

CVSS: 7.5v3.1HighPublished

Published 18-09-2026Last modified 17-10-2026

Open JSON

Vulnerability summary

RHSA-2026:68660 is a high (CVSS 7.5) vulnerability in tomcat Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 16 · Downstream 0

CVE-2026-32990 CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513+10 more

Timeline

18-09-2026
PublishedVulnerability first disclosed.
17-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: tomcat security, bug fix, and enhancement update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat8 products

tomcat< 1:9.0.120-2.el9_8
tomcat-admin-webapps< 1:9.0.120-2.el9_8
tomcat-docs-webapp< 1:9.0.120-2.el9_8
tomcat-el-3.0-api< 1:9.0.120-2.el9_8
tomcat-jsp-2.3-api< 1:9.0.120-2.el9_8

Show all 8

1 vendor · 8 products

References

83 links

Show all 83 references

security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68660.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-32990REPORT
www.cve.org/CVERecord?id=CVE-2026-32990Advisory
nvd.nist.gov/vuln/detail/CVE-2026-32990Advisory
lists.apache.org/thread/1nl9zqft0ksqlhlkd3j4obyjz1ghoyn7ARTICLE
access.redhat.com/security/cve/CVE-2026-41284REPORT
bugzilla.redhat.com/show_bug.cgi?id=2476518REPORT
www.cve.org/CVERecord?id=CVE-2026-41284Advisory
nvd.nist.gov/vuln/detail/CVE-2026-41284Advisory
lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qcARTICLE
access.redhat.com/security/cve/CVE-2026-41293REPORT
www.cve.org/CVERecord?id=CVE-2026-41293Advisory
nvd.nist.gov/vuln/detail/CVE-2026-41293Advisory
lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1rARTICLE
access.redhat.com/security/cve/CVE-2026-42498REPORT
www.cve.org/CVERecord?id=CVE-2026-42498Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42498Advisory
lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdbARTICLE
access.redhat.com/security/cve/CVE-2026-43512REPORT
www.cve.org/CVERecord?id=CVE-2026-43512Advisory
nvd.nist.gov/vuln/detail/CVE-2026-43512Advisory
lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73ARTICLE
access.redhat.com/security/cve/CVE-2026-43513REPORT
www.cve.org/CVERecord?id=CVE-2026-43513Advisory
nvd.nist.gov/vuln/detail/CVE-2026-43513Advisory
lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogpARTICLE
access.redhat.com/security/cve/CVE-2026-43514REPORT
bugzilla.redhat.com/show_bug.cgi?id=2476512REPORT
www.cve.org/CVERecord?id=CVE-2026-43514Advisory
nvd.nist.gov/vuln/detail/CVE-2026-43514Advisory
lists.apache.org/thread/2k654v5cq123npfsd1b2kk1y30owqb1mARTICLE
access.redhat.com/security/cve/CVE-2026-43515REPORT
www.cve.org/CVERecord?id=CVE-2026-43515Advisory
nvd.nist.gov/vuln/detail/CVE-2026-43515Advisory
lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bbARTICLE
access.redhat.com/security/cve/CVE-2026-50229REPORT
bugzilla.redhat.com/show_bug.cgi?id=2494688REPORT
www.cve.org/CVERecord?id=CVE-2026-50229Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50229Advisory
lists.apache.org/thread/wlt2no8bw45zl1w8byop4zfqphldf5j0ARTICLE
access.redhat.com/security/cve/CVE-2026-53404REPORT
bugzilla.redhat.com/show_bug.cgi?id=2494681REPORT
www.cve.org/CVERecord?id=CVE-2026-53404Advisory
nvd.nist.gov/vuln/detail/CVE-2026-53404Advisory
lists.apache.org/thread/rdhpghgfskrdmw9hqzjgjrtw538smpmzARTICLE
access.redhat.com/security/cve/CVE-2026-53434REPORT
bugzilla.redhat.com/show_bug.cgi?id=2494668REPORT
www.cve.org/CVERecord?id=CVE-2026-53434Advisory
nvd.nist.gov/vuln/detail/CVE-2026-53434Advisory
lists.apache.org/thread/x510lbq0sfrd1qyo7q3r1mpllgpdcoskARTICLE
access.redhat.com/security/cve/CVE-2026-55276REPORT
bugzilla.redhat.com/show_bug.cgi?id=2494675REPORT
www.cve.org/CVERecord?id=CVE-2026-55276Advisory
nvd.nist.gov/vuln/detail/CVE-2026-55276Advisory
lists.apache.org/thread/jy09xjlzn6r2qwvqoph8vcmf959yq68vARTICLE
access.redhat.com/security/cve/CVE-2026-55955REPORT
bugzilla.redhat.com/show_bug.cgi?id=2494678REPORT
www.cve.org/CVERecord?id=CVE-2026-55955Advisory
nvd.nist.gov/vuln/detail/CVE-2026-55955Advisory
lists.apache.org/thread/g4p5sf45p3f9r011pwqs9r54yd64s106ARTICLE
access.redhat.com/security/cve/CVE-2026-55956REPORT
bugzilla.redhat.com/show_bug.cgi?id=2494676REPORT
www.cve.org/CVERecord?id=CVE-2026-55956Advisory
nvd.nist.gov/vuln/detail/CVE-2026-55956Advisory
lists.apache.org/thread/dcjdcnnnww9hhdm016hr0l7hpw1bzjfpARTICLE
access.redhat.com/security/cve/CVE-2026-59083REPORT
www.cve.org/CVERecord?id=CVE-2026-59083Advisory
nvd.nist.gov/vuln/detail/CVE-2026-59083Advisory
lists.apache.org/thread/3g63zos2gkjo5vgnrk8kxmosv47w6wbqARTICLE
access.redhat.com/security/cve/CVE-2026-59084REPORT
www.cve.org/CVERecord?id=CVE-2026-59084Advisory
nvd.nist.gov/vuln/detail/CVE-2026-59084Advisory
lists.apache.org/thread/7w9746ootcxo0gvx26xjpw80l31f1qw7ARTICLE