Apache Tomcat 5.5.36 Actively exploited

Attackers are using a vulnerability in this version right now. Upgrade immediately.

Upgrade to 9.0.123

The lowest fixed release that is still supported.

Known vulnerabilities

3 (1 critical, 1 high)

End of life

Yes, since 2012-09-30

Data as of

2026-10-25 00:22 UTC

Vulnerabilities

• CVE-2016-8735 critical exploited fixed in 6.0.48
• CVE-2026-41284 high
• CVE-2026-24733 medium

• 9 Apache Tomcat vulnerabilities are still under review and not included in this verdict.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.