Security news
Apache Tomcat vulnerabilities and patches
Articles on Apache Tomcat vulnerabilities, and the latest fixed versions we have checked.
Subscribe by RSSLatest patches
| Product / branch | Fixed version | Released | Supported until | Checked | Source |
|---|---|---|---|---|---|
| Apache Tomcat 11.0 | 11.0.27 | 12 October 2026 | - | 9 November 2026 | Official source (Apache Tomcat 11.0) |
| Apache Tomcat 10.1 | 10.1.61 | 12 October 2026 | - | 9 November 2026 | Official source (Apache Tomcat 10.1) |
| Apache Tomcat 9.0 | 9.0.123 | 12 October 2026 | - | 9 November 2026 | Official source (Apache Tomcat 9.0) |
Correct as of the date checked. Always confirm with the official source before updating. A version ending in "+" is the oldest release that contains the fix.
Latest articles
-
Apache Tomcat Vulnerabilities, October 2026: 8 Flaws and Fixes
Eight Apache Tomcat flaws made public in October 2026. Which versions are affected, how to check LDAP, HTTP/2 and AJP settings, and how to u...
Unsure how to go about updating?
Talk to us about updating an older system or taking over its maintenance. The consultation is free.