CVE catalog

CVE-2026-73581

Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apach

[CVE catalog]

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Published: Sep 16, 2026, 3:12:00 PM UTC
Updated: Sep 23, 2026, 12:17:06 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.16% · Oct 25, 2026

Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	tomcat9	sid	`9.0.122-1`	fixed
Debian	tomcat9	forky	`9.0.122-1`	fixed
Debian	tomcat9	trixie	`9.0.95-1`	fixed
Debian	tomcat9	bookworm	`9.0.70-2`	fixed
Debian	tomcat10	sid	`10.1.60-1`	fixed
Debian	tomcat10	forky	`10.1.60-1`	fixed
Debian	tomcat10	trixie	`10.1.55-1~deb13u1`	vulnerable
Debian	tomcat10	trixie-security	`10.1.55-1~deb13u1`	vulnerable
Debian	tomcat10	bookworm	`10.1.55-1~deb12u1`	vulnerable
Debian	tomcat10	bookworm-security	`10.1.55-1~deb12u1`	vulnerable
Suse	tomcat	linux enterprise module for web and scripting 15 sp7	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise module for web and scripting 15 sp7	`10.1.60-150200.5.82.2`	fixed
Suse	libtcnative-1-0	linux enterprise high performance computing 15 sp4-espos	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise high performance computing 15 sp4-espos	`9.0.122-150200.123.2`	fixed
Suse	libtcnative-1-0	linux enterprise high performance computing 15 sp4-ltss	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise high performance computing 15 sp4-ltss	`9.0.122-150200.123.2`	fixed
Suse	libtcnative-1-0	linux enterprise high performance computing 15 sp5-espos	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise high performance computing 15 sp5-espos	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise high performance computing 15 sp5-espos	`10.1.60-150200.5.82.2`	fixed
Suse	libtcnative-1-0	linux enterprise high performance computing 15 sp5-ltss	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise high performance computing 15 sp5-ltss	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise high performance computing 15 sp5-ltss	`10.1.60-150200.5.82.2`	fixed
Suse	libtcnative-1-0	linux enterprise server 15 sp4-ltss	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise server 15 sp4-ltss	`9.0.122-150200.123.2`	fixed
Suse	libtcnative-1-0	linux enterprise server 15 sp5-ltss	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise server 15 sp5-ltss	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise server 15 sp5-ltss	`10.1.60-150200.5.82.2`	fixed
Suse	tomcat	linux enterprise server 15 sp6-ltss	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise server 15 sp6-ltss	`10.1.60-150200.5.82.2`	fixed
Suse	libtcnative-1-0	linux enterprise server for sap applications 15 sp4	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise server for sap applications 15 sp4	`9.0.122-150200.123.2`	fixed
Suse	libtcnative-1-0	linux enterprise server for sap applications 15 sp5	`1.3.9-150200.6.11.2`	fixed
Suse	tomcat	linux enterprise server for sap applications 15 sp5	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise server for sap applications 15 sp5	`10.1.60-150200.5.82.2`	fixed
Suse	tomcat	linux enterprise server for sap applications 15 sp6	`9.0.122-150200.123.2`	fixed
Suse	tomcat10	linux enterprise server for sap applications 15 sp6	`10.1.60-150200.5.82.2`	fixed
Suse	libtcnative-1-0	linux enterprise module for basesystem 15 sp7	`1.3.9-150600.16.9.2`	fixed
Suse	libtcnative-1-0	linux enterprise module for web and scripting 15 sp7	`1.3.9-150600.16.9.2`	fixed
Suse	tomcat11	linux enterprise module for web and scripting 15 sp7	`11.0.26-150600.13.36.2`	fixed
Suse	libtcnative-1-0	linux enterprise server 15 sp6-ltss	`1.3.9-150600.16.9.2`	fixed
Suse	tomcat11	linux enterprise server 15 sp6-ltss	`11.0.26-150600.13.36.2`	fixed
Suse	libtcnative-1-0	linux enterprise server for sap applications 15 sp6	`1.3.9-150600.16.9.2`	fixed
Suse	tomcat11	linux enterprise server for sap applications 15 sp6	`11.0.26-150600.13.36.2`	fixed
Suse	libtcnative-1-0	linux enterprise server 16.0	`1.3.9-160000.1.1`	fixed
Suse	libtcnative-2-0	linux enterprise server 16.0	`2.0.16-160000.1.1`	fixed
Suse	tomcat	linux enterprise server 16.0	`9.0.122-160000.1.1`	fixed
Suse	tomcat10	linux enterprise server 16.0	`10.1.60-160000.1.1`	fixed
Suse	tomcat11	linux enterprise server 16.0	`11.0.26-160000.1.1`	fixed
Suse	libtcnative-1-0	linux enterprise server for sap applications 16.0	`1.3.9-160000.1.1`	fixed
Suse	libtcnative-2-0	linux enterprise server for sap applications 16.0	`2.0.16-160000.1.1`	fixed
Suse	tomcat	linux enterprise server for sap applications 16.0	`9.0.122-160000.1.1`	fixed
Suse	tomcat10	linux enterprise server for sap applications 16.0	`10.1.60-160000.1.1`	fixed
Suse	tomcat11	linux enterprise server for sap applications 16.0	`11.0.26-160000.1.1`	fixed
Opensuse	libtcnative-1-0	leap 16.0	`1.3.9-160000.1.1`	fixed
Opensuse	libtcnative-2-0	leap 16.0	`2.0.16-160000.1.1`	fixed
Opensuse	tomcat	leap 16.0	`9.0.122-160000.1.1`	fixed
Opensuse	tomcat10	leap 16.0	`10.1.60-160000.1.1`	fixed
Opensuse	tomcat11	leap 16.0	`11.0.26-160000.1.1`	fixed
Opensuse	tomcat11	tumbleweed	`11.0.26-1.1`	fixed
Opensuse	tomcat10	tumbleweed	`10.1.60-1.1`	fixed
Opensuse	tomcat	tumbleweed	`9.0.122-1.1`	fixed
Ubuntu	tomcat6	pro	`6.0.37-1`	vulnerable
Ubuntu	tomcat6	pro	`6.0.39-1`	vulnerable
Ubuntu	tomcat6	pro	`6.0.39-1ubuntu0.1`	vulnerable
Ubuntu	tomcat6	pro	`6.0.39-1ubuntu0.1+esm1`	vulnerable
Ubuntu	tomcat6	pro	`6.0.39-1ubuntu0.1+esm2`	vulnerable
Ubuntu	tomcat6	pro	`6.0.39-1ubuntu0.1+esm3`	vulnerable
Ubuntu	tomcat7	pro	`7.0.64-1`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.1`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.3`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.4`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.4+esm1`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.4+esm2`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.4+esm3`	vulnerable
Ubuntu	tomcat7	pro	`7.0.68-1ubuntu0.4+esm4`	vulnerable
Ubuntu	tomcat8	pro	`8.5.21-1ubuntu1`	vulnerable
Ubuntu	tomcat8	pro	`8.5.29-1`	vulnerable
Ubuntu	tomcat8	pro	`8.5.30-1`	vulnerable
Ubuntu	tomcat8	pro	`8.5.30-1ubuntu1`	vulnerable
Ubuntu	tomcat8	pro	`8.5.30-1ubuntu1.2`	vulnerable
Ubuntu	tomcat8	pro	`8.5.30-1ubuntu1.3`	vulnerable
Ubuntu	tomcat8	pro	`8.5.30-1ubuntu1.4`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.1`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.2`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3+esm1`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3+esm2`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3+esm3`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3+esm4`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3+esm5`	vulnerable
Ubuntu	tomcat8	pro	`8.5.39-1ubuntu1~18.04.3+esm6`	vulnerable
Ubuntu	tomcat9	pro	`9.0.43-3`	vulnerable
Ubuntu	tomcat9	pro	`9.0.54-1`	vulnerable
Ubuntu	tomcat9	pro	`9.0.55-1`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.1`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.1+esm1`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.1+esm2`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.1+esm3`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.1+esm4`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.2`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.2+esm1`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.2+esm2`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.2+esm3`	vulnerable
Ubuntu	tomcat9	pro	`9.0.58-1ubuntu0.2+esm4`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.10-1`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.14-1`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.15-1`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.16-1`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.16-1ubuntu0.1~esm1`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.16-1ubuntu0.1~esm2`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.16-1ubuntu0.1~esm3`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.16-1ubuntu0.1~esm4`	vulnerable
Ubuntu	tomcat10	24.04	`10.1.55-1ubuntu2~24.04.1`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.70-1ubuntu1`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.70-2`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.70-2ubuntu0.1`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.70-2ubuntu0.1+esm1`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.70-2ubuntu0.1+esm2`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.70-2ubuntu0.1+esm3`	vulnerable
Ubuntu	tomcat9	24.04	`9.0.118-1~24.04.1`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.40-1ubuntu1`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.54-1`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.54-1ubuntu1`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.54-1ubuntu2`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.55-1ubuntu1`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.55-1ubuntu2`	vulnerable
Ubuntu	tomcat10	26.10	`10.1.57~us1-0ubuntu1`	vulnerable
Ubuntu	tomcat11	26.10	`11.0.18-1`	vulnerable
Ubuntu	tomcat11	26.10	`11.0.22-2`	vulnerable
Ubuntu	tomcat11	26.10	`11.0.22-2ubuntu1`	vulnerable
Ubuntu	tomcat11	26.10	`11.0.22-2ubuntu2`	vulnerable
Ubuntu	tomcat11	26.10	`11.0.24-1ubuntu1`	vulnerable
Ubuntu	tomcat9	26.10	`9.0.115-1`	vulnerable
Ubuntu	tomcat9	26.10	`9.0.115-1ubuntu1`	vulnerable
Ubuntu	tomcat9	26.10	`9.0.118-1`	vulnerable
Ubuntu	tomcat10	26.04	`10.1.40-1ubuntu1`	vulnerable
Ubuntu	tomcat10	26.04	`10.1.40-1ubuntu1.26.04.1`	vulnerable
Ubuntu	tomcat10	26.04	`10.1.55-1ubuntu2~26.04.1`	vulnerable
Ubuntu	tomcat9	26.04	`9.0.95-1ubuntu1`	vulnerable
Ubuntu	tomcat9	26.04	`9.0.111-1`	vulnerable
Ubuntu	tomcat9	26.04	`9.0.115-1`	vulnerable
Ubuntu	tomcat9	26.04	`9.0.115-1ubuntu0.1`	vulnerable
Ubuntu	tomcat9	26.04	`9.0.118-1~26.04.1`	vulnerable
Ubuntu	tomcat11	26.04	`11.0.6-1`	vulnerable
Ubuntu	tomcat11	26.04	`11.0.11-1`	vulnerable
Ubuntu	tomcat11	26.04	`11.0.15-1`	vulnerable
Ubuntu	tomcat11	26.04	`11.0.18-1`	vulnerable
Ubuntu	tomcat11	26.04	`11.0.18-1ubuntu0.1~esm1`	vulnerable
Ubuntu	tomcat11	26.04	`11.0.22-2ubuntu2~26.04.1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	tomcat9	source	sid	`9.0.70-2`	not yet assigned	Not reported	Not reported
Debian	tomcat9	source	forky	`9.0.70-2`	not yet assigned	Not reported	Not reported
Debian	tomcat9	source	trixie	`9.0.70-2`	not yet assigned	Not reported	Not reported
Debian	tomcat9	source	bookworm	`9.0.70-2`	not yet assigned	Not reported	Not reported
Debian	tomcat10	source	sid	`10.1.60-1`	not yet assigned	Not reported	Not reported
Debian	tomcat10	source	forky	`10.1.60-1`	not yet assigned	Not reported	Not reported
Debian	tomcat10	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	tomcat10	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported
Suse	tomcat	rpm	linux enterprise module for web and scripting 15 sp7	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise module for web and scripting 15 sp7	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise high performance computing 15 sp4-espos	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise high performance computing 15 sp4-espos	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise high performance computing 15 sp4-ltss	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise high performance computing 15 sp5-espos	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise high performance computing 15 sp5-espos	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise high performance computing 15 sp5-espos	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise high performance computing 15 sp5-ltss	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise high performance computing 15 sp5-ltss	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server 15 sp4-ltss	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise server 15 sp4-ltss	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server 15 sp5-ltss	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise server 15 sp5-ltss	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise server 15 sp5-ltss	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise server 15 sp6-ltss	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise server 15 sp6-ltss	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server for sap applications 15 sp4	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise server for sap applications 15 sp4	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server for sap applications 15 sp5	`1.3.9-150200.6.11.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise server for sap applications 15 sp5	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise server for sap applications 15 sp5	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat	rpm	linux enterprise server for sap applications 15 sp6	`9.0.122-150200.123.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	tomcat10	rpm	linux enterprise server for sap applications 15 sp6	`10.1.60-150200.5.82.2`	Not reported	SUSE-SU-2026:4546-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise module for basesystem 15 sp7	`1.3.9-150600.16.9.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise module for web and scripting 15 sp7	`1.3.9-150600.16.9.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	tomcat11	rpm	linux enterprise module for web and scripting 15 sp7	`11.0.26-150600.13.36.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server 15 sp6-ltss	`1.3.9-150600.16.9.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	tomcat11	rpm	linux enterprise server 15 sp6-ltss	`11.0.26-150600.13.36.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server for sap applications 15 sp6	`1.3.9-150600.16.9.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	tomcat11	rpm	linux enterprise server for sap applications 15 sp6	`11.0.26-150600.13.36.2`	Not reported	SUSE-SU-2026:4544-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server 16.0	`1.3.9-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	libtcnative-2-0	rpm	linux enterprise server 16.0	`2.0.16-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	tomcat	rpm	linux enterprise server 16.0	`9.0.122-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	tomcat10	rpm	linux enterprise server 16.0	`10.1.60-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	tomcat11	rpm	linux enterprise server 16.0	`11.0.26-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	libtcnative-1-0	rpm	linux enterprise server for sap applications 16.0	`1.3.9-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	libtcnative-2-0	rpm	linux enterprise server for sap applications 16.0	`2.0.16-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	tomcat	rpm	linux enterprise server for sap applications 16.0	`9.0.122-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	tomcat10	rpm	linux enterprise server for sap applications 16.0	`10.1.60-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Suse	tomcat11	rpm	linux enterprise server for sap applications 16.0	`11.0.26-160000.1.1`	Not reported	SUSE-SU-2026:23985-1	Not reported
Opensuse	libtcnative-1-0	rpm	leap 16.0	`1.3.9-160000.1.1`	Not reported	OPENSUSE-SU-2026:21984-1	Not reported
Opensuse	libtcnative-2-0	rpm	leap 16.0	`2.0.16-160000.1.1`	Not reported	OPENSUSE-SU-2026:21984-1	Not reported
Opensuse	tomcat	rpm	leap 16.0	`9.0.122-160000.1.1`	Not reported	OPENSUSE-SU-2026:21984-1	Not reported
Opensuse	tomcat10	rpm	leap 16.0	`10.1.60-160000.1.1`	Not reported	OPENSUSE-SU-2026:21984-1	Not reported
Opensuse	tomcat11	rpm	leap 16.0	`11.0.26-160000.1.1`	Not reported	OPENSUSE-SU-2026:21984-1	Not reported
Opensuse	tomcat11	rpm	tumbleweed	`11.0.26-1.1`	Not reported	OPENSUSE-SU-2026:11908-1	Not reported
Opensuse	tomcat10	rpm	tumbleweed	`10.1.60-1.1`	Not reported	OPENSUSE-SU-2026:11907-1	Not reported
Opensuse	tomcat	rpm	tumbleweed	`9.0.122-1.1`	Not reported	OPENSUSE-SU-2026:11906-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libtomcat10-embed-java]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[libtomcat10-java]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[tomcat10]Affected
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[tomcat10-admin]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[tomcat10-common]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[tomcat10-docs]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[tomcat10-examples]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[tomcat10-user]Affected
Source package: [tomcat10]
Details (6)
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.40-1~bpo12+1 · all · bookworm-backports
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- 10.1.55-1~deb12u1 · all · bookworm-security
  Affected
  nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12

[Debian 13 (Trixie)]

[libtomcat10-embed-java]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[libtomcat10-java]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[libtomcat11-embed-java]Affected
Source package: [tomcat11]
Details (4)
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
[libtomcat11-java]Affected
Source package: [tomcat11]
Details (4)
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
[tomcat10]Affected
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[tomcat10-admin]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[tomcat10-common]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[tomcat10-docs]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[tomcat10-examples]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[tomcat10-user]Affected
Source package: [tomcat10]
Details (4)
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
- 10.1.55-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat10 · debian · 13
[tomcat11]Affected
Details (4)
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
[tomcat11-admin]Affected
Source package: [tomcat11]
Details (4)
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13
- 11.0.22-1~deb13u1 · all · trixie-security
  Affected
  nvd · tomcat11 · debian · 13

Next results

Observed: Oct 27, 2026, 6:14:09 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]