
Catalogo CVE
CVE-2026-55957
Missing Critical Step in Authentication vulnerability…
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through 9.0.100, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.5, 10.1.37 or 9.0.101, which fixes the issue.
- Gravità
- High · CVSS 7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.85% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie-security | tomcat10 | 10.1.55-1~deb13u1 | Fixed | [CVE-2026-55957] |
| Debiantrixie | tomcat10 | 10.1.52-1~deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiantrixie | tomcat10 | 10.1.55-1~deb13u1 | Fixed | [CVE-2026-55957] |
| Debiantrixie | tomcat9 | 9.0.70-2 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiantrixie | tomcat9 | 9.0.95-1 | Fixed | [CVE-2026-55957] |
| Debiansid | tomcat10 | 10.1.40-1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiansid | tomcat10 | 10.1.60-1 | Fixed | [CVE-2026-55957] |
| Debiansid | tomcat9 | 9.0.122-1 | Fixed | [CVE-2026-55957] |
| Debiansid | tomcat9 | 9.0.70-2 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debianforky | tomcat10 | 10.1.40-1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debianforky | tomcat10 | 10.1.60-1 | Fixed | [CVE-2026-55957] |
| Debianforky | tomcat9 | 9.0.122-1 | Fixed | [CVE-2026-55957] |
Showing 12 fix observations. All 20 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | tomcat | 10.1.37 | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | tomcat | 11.0.5 | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | tomcat | 9.0.101 | UnknownSource applicability is not established | Provider not reported |
| Debianbookworm | tomcat10 | 10.1.52-1~deb12u1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debianbookworm | tomcat10 | 10.1.55-1~deb12u1 | Fixed | [CVE-2026-55957] |
| Debianbookworm | tomcat9 | 9.0.70-2 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debianbookworm-security | tomcat10 | 10.1.55-1~deb12u1 | Fixed | [CVE-2026-55957] |
| Debianforky | tomcat10 | 10.1.40-1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debianforky | tomcat10 | 10.1.60-1 | Fixed | [CVE-2026-55957] |
| Debianforky | tomcat9 | 9.0.122-1 | Fixed | [CVE-2026-55957] |
| Debianforky | tomcat9 | 9.0.70-2 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiansid | tomcat10 | 10.1.40-1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiansid | tomcat10 | 10.1.60-1 | Fixed | [CVE-2026-55957] |
| Debiansid | tomcat9 | 9.0.122-1 | Fixed | [CVE-2026-55957] |
| Debiansid | tomcat9 | 9.0.70-2 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiantrixie | tomcat10 | 10.1.52-1~deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiantrixie | tomcat10 | 10.1.55-1~deb13u1 | Fixed | [CVE-2026-55957] |
| Debiantrixie | tomcat9 | 9.0.70-2 | FixedDistribution-reported fixed boundary | [CVE-2026-55957] |
| Debiantrixie | tomcat9 | 9.0.95-1 | Fixed | [CVE-2026-55957] |
| Debiantrixie-security | tomcat10 | 10.1.55-1~deb13u1 | Fixed | [CVE-2026-55957] |
Original provider fields
{
"package_releases": [
{
"name": "tomcat9",
"status": "fixed",
"release": "sid",
"version": "9.0.122-1"
},
{
"name": "tomcat9",
"status": "fixed",
"release": "forky",
"version": "9.0.122-1"
},
{
"name": "tomcat9",
"status": "fixed",
"release": "trixie",
"version": "9.0.95-1"
},
{
"name": "tomcat9",
"status": "fixed",
"release": "bookworm",
"version": "9.0.70-2"
},
{
"name": "tomcat10",
"status": "fixed",
"release": "sid",
"version": "10.1.60-1"
},
{
"name": "tomcat10",
"status": "fixed",
"release": "forky",
"version": "10.1.60-1"
},
{
"name": "tomcat10",
"status": "fixed",
"release": "trixie",
"version": "10.1.55-1~deb13u1"
},
{
"name": "tomcat10",
"status": "fixed",
"release": "trixie-security",
"version": "10.1.55-1~deb13u1"
},
{
"name": "tomcat10",
"status": "fixed",
"release": "bookworm",
"version": "10.1.55-1~deb12u1"
},
{
"name": "tomcat10",
"status": "fixed",
"release": "bookworm-security",
"version": "10.1.55-1~deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "tomcat9",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "9.0.70-2"
},
{
"bug": null,
"name": "tomcat9",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "9.0.70-2"
},
{
"bug": null,
"name": "tomcat9",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "9.0.70-2"
},
{
"bug": null,
"name": "tomcat9",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "9.0.70-2"
},
{
"bug": null,
"name": "tomcat10",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "10.1.40-1"
},
{
"bug": null,
"name": "tomcat10",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "10.1.40-1"
},
{
"bug": null,
"name": "tomcat10",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "10.1.52-1~deb13u1"
},
{
"bug": null,
"name": "tomcat10",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "10.1.52-1~deb12u1"
}
],
"distribution_packages": [
{
"name": "tomcat",
"fixed_version": "9.0.101",
"applicability_unknown": true
},
{
"name": "tomcat",
"fixed_version": "10.1.37",
"applicability_unknown": true
},
{
"name": "tomcat",
"fixed_version": "11.0.5",
"applicability_unknown": true
},
{
"name": "tomcat",
"ranges": [
{
"fixed": "11.0.5",
"introduced": "11.0.0",
"last_affected": "",
"start_excluding": ""
}
],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55957",
"fixed_version": "11.0.5",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-55957",
"provider_updated_at": "2026-10-25T21:10:00.770"
}
]
}OpenFactory catalog packages
L’associazione dei pacchetti è in corso.
[Debian 12 (Bookworm)]
- [libtomcat10-embed-java]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [libtomcat10-java]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [libtomcat9-java]Sconosciuto
Pacchetto sorgente: [tomcat9]
Dettagli (2)
9.0.70-2· all · bookwormCorretta · Corretta:
9.0.70-2nvd · tomcat9 · debian · bookworm; nvd · tomcat9 · debian · 12
9.0.70-2· all · bookwormCorretta · Corretta:
9.0.70-2nvd · tomcat9 · debian · bookworm; nvd · tomcat9 · debian · 12
- [tomcat10]Sconosciuto
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [tomcat10-admin]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [tomcat10-common]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [tomcat10-docs]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [tomcat10-examples]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
- [tomcat10-user]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (6)
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookwormCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.40-1~bpo12+1· all · bookworm-backportsInteressata · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
10.1.55-1~deb12u1· all · bookworm-securityCorretta · Corretta:
10.1.52-1~deb12u1nvd · tomcat10 · debian · bookworm; nvd · tomcat10 · debian · 12
[Debian 13 (Trixie)]
- [libtomcat10-embed-java]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [libtomcat10-java]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [libtomcat11-embed-java]Sconosciuto
Pacchetto sorgente: [tomcat11]
Dettagli (4)
11.0.22-1~deb13u1· all · trixieCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
11.0.22-1~deb13u1· all · trixieCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
11.0.22-1~deb13u1· all · trixie-securityCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
11.0.22-1~deb13u1· all · trixie-securityCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
- [libtomcat11-java]Sconosciuto
Pacchetto sorgente: [tomcat11]
Dettagli (4)
11.0.22-1~deb13u1· all · trixieCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
11.0.22-1~deb13u1· all · trixieCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
11.0.22-1~deb13u1· all · trixie-securityCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
11.0.22-1~deb13u1· all · trixie-securityCorretta · Corretta:
11.0.15-1~deb13u1nvd · tomcat11 · debian · 13
- [libtomcat9-java]Sconosciuto
Pacchetto sorgente: [tomcat9]
Dettagli (2)
9.0.95-1· all · trixieCorretta · Corretta:
9.0.70-2nvd · tomcat9 · debian · 13
9.0.95-1· all · trixieCorretta · Corretta:
9.0.70-2nvd · tomcat9 · debian · 13
- [tomcat10]Sconosciuto
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [tomcat10-admin]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [tomcat10-common]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [tomcat10-docs]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [tomcat10-examples]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
- [tomcat10-user]Sconosciuto
Pacchetto sorgente: [tomcat10]
Dettagli (4)
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixieCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
10.1.55-1~deb13u1· all · trixie-securityCorretta · Corretta:
10.1.52-1~deb13u1nvd · tomcat10 · debian · 13
Osservato:
Riferimenti
- [http://www.openwall.com/lists/oss-security/2026/06/29/26]
- [https://access.redhat.com/errata/RHSA-2026:67163]
- [https://access.redhat.com/errata/RHSA-2026:67164]
- [https://access.redhat.com/errata/RHSA-2026:68659]
- [https://access.redhat.com/errata/RHSA-2026:68677]
- [https://access.redhat.com/errata/RHSA-2026:68678]
- [https://access.redhat.com/errata/RHSA-2026:68679]
- [https://access.redhat.com/errata/RHSA-2026:68680]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_68659.json]
- [https://lists.apache.org/thread/7fk339o5jvd4mcgsf0chbrn4o525ccjh]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-55957]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-55957]
- [https://security-tracker.debian.org/tracker/CVE-2026-55957]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55957.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2123.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]