Maven/org.apache.tomcat:tomcat-coyote CVE-2026-24734: high 7.5, EPSS 0.57%
Apache Tomcat has an Improper Input Validation vulnerability
Action: Upgrade org.apache.tomcat:tomcat-coyote to 9.0.115 (9.x), 10.1.52 (10.x) or 11.0.18 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0-M1 | 11.0.18 | - |
| 10.1.0-M7 | 10.1.52 | - |
| 9.0.83 | 9.0.115 | - |
Fixed versions
| 11.0.18 | 10.1.52 | 9.0.115 |
Sources
- osv: GHSA-mgp5-rv84-w37q
- https://nvd.nist.gov/vuln/detail/CVE-2026-24734
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/292dlmx3fz1888v6v16221kpozq56gml
CVE-2026-24734 · published · modified · JSON