PT-2026-40069 · Apache+4 · Apache Tomcat+4

Dawit Jeong · CVE-2026-41293 · Published 2026-05-12 · Updated 2026-07-09

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.21 Apache Tomcat versions 10.1.0-M1 through 10.1.54 Apache Tomcat versions 9.0.0.M1 through 9.0.117 Apache Tomcat versions 10.0.0-M1 through 10.0.27

Description Improper Input Validation occurs in Apache Tomcat, which can lead to security issues when the software fails to properly validate input data.

Recommendations Upgrade to version [FIXED VERSION].

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-08085

BIT-TOMCAT-2026-41293

CVE-2026-41293

GHSA-R29C-68GH-XP6X

OESA-2026-2296

OPENSUSE-SU-2026:10925-1

OPENSUSE-SU-2026:10926-1

OPENSUSE-SU-2026:10927-1

OPENSUSE-SU-2026:21117-1

OPENSUSE-SU-2026:21121-1

OPENSUSE-SU-2026:21122-1

SUSE-SU-2026:22195-1

SUSE-SU-2026:22196-1

SUSE-SU-2026:22197-1

SUSE-SU-2026:2299-1

SUSE-SU-2026:2374-1

SUSE-SU-2026:2377-1

SUSE-SU-2026:2675-1

USN-8417-1

USN-8450-1

Affected Products

Apache Tomcat

Confluence

Linuxmint

Red Os

Ubuntu

References · 90

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41293.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-41293 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42498 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2296 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43514 · Security Note
• https://osv.dev/vulnerability/USN-8417-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10925-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43513 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41284 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10926-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43512 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43513 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8417-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41293 · Vendor Advisory