{"product":"tomcat","productName":"Apache Tomcat","version":"5.5.36","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2012-09-30","cycle":"5"},"counts":{"critical":1,"high":1,"medium":1,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2016-8735","severity":"critical","score":9.8,"kev":true,"fixedIn":"6.0.48","advisoryUrl":"https://access.redhat.com/errata/RHSA-2017:0455"},{"id":"CVE-2026-41284","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc"},{"id":"CVE-2026-24733","severity":"medium","score":6.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/6xk3t65qpn1myp618krtfotbjn1qt90f"}],"moreVulnerabilities":0,"upgrade":{"recommended":"9.0.123"},"notes":["9 Apache Tomcat vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-25T01:07:50.475Z"}