{"product":"tomcat","productName":"Apache Tomcat","version":"10.0.27","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2022-10-31","cycle":"10.0"},"counts":{"critical":1,"high":3,"medium":1,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2023-44487","severity":"medium","kev":true,"fixedIn":"10.1.14","advisoryUrl":"https://github.com/advisories/GHSA-qppj-fm5r-hxr3"},{"id":"CVE-2026-41293","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r"},{"id":"CVE-2026-41284","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc"},{"id":"CVE-2026-29146","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w"},{"id":"CVE-2023-24998","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy"}],"moreVulnerabilities":0,"upgrade":{"recommended":"10.1.61"},"notes":["9 Apache Tomcat vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-25T01:07:50.475Z"}