{"product":"tomcat","productName":"Apache Tomcat","version":"6.0.53","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2016-12-31","cycle":"6"},"counts":{"critical":0,"high":1,"medium":1,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2026-41284","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc"},{"id":"CVE-2026-24733","severity":"medium","score":6.5,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/6xk3t65qpn1myp618krtfotbjn1qt90f"}],"moreVulnerabilities":0,"upgrade":{"recommended":"9.0.123"},"notes":["9 Apache Tomcat vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T18:07:49.478Z"}