The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18536 advisory.

    Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet     and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by     Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and     released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the     best-of-breed developers from around the world.

    Security Fix(es):

    * tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701)

    * org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve     (CVE-2025-55668)

    * org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18916 advisory.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

    Security Fix(es):

    * tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701)

    * org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve     (CVE-2025-55668)

    * org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18536 advisory.

    - Resolves: RHEL-150720       Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734)
    - Resolves:
      Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500)
    - Resolves:
      Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487)
    - Resolves:
      Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486)
    - Resolves:
      Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483)
    - Resolves:
      Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990)
    - Resolves:
      Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146)
    - Resolves:
      Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145)
    - Resolves:
      Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129)
    - Resolves:
      Tomcat: Occasionally open redirect (CVE-2026-25854)
    - Resolves:
      Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880)
    - Resolves:
      Tomcat: Incomplete OCSP verification checks (CVE-2026-24734)
    - Resolves:
      Tomcat: Security constraint bypass (CVE-2026-24733)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
315317	RHEL 10 : tomcat9 (RHSA-2026:18536)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/5/19	medium
315422	RHEL 9 : tomcat (RHSA-2026:18916)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/5/19	medium
328894	Oracle Linux 10 : tomcat9 (ELSA-2026-18536)	Nessus	Oracle Linux Local Security Checks	2026/7/22	2026/7/22	medium

检测

插件搜索

medium

medium

medium