{"product":"tomcat","productName":"Apache Tomcat","version":"8.5.100","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2024-03-31","cycle":"8.5"},"counts":{"critical":17,"high":30,"medium":9,"low":3,"unknown":0},"vulnerabilities":[{"id":"CVE-2025-24813","severity":"critical","score":10,"kev":true,"advisoryUrl":"https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq"},{"id":"CVE-2026-76183","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/45mxk8nj2q8pkhct6lfxkvtm2jpywrsp"},{"id":"CVE-2026-65905","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj"},{"id":"CVE-2026-43512","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73"},{"id":"CVE-2026-41293","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r"},{"id":"CVE-2025-31651","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/list.html?announce@tomcat.apache.org"},{"id":"CVE-2024-56337","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/b2b9qrgjrz1kvo4ym8y2wkfdvwoq6qbp"},{"id":"CVE-2024-52316","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/lopzlqh91jj9n334g02om08sbysdb928"},{"id":"CVE-2024-50379","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r"},{"id":"CVE-2025-55754","severity":"critical","score":9.6,"kev":false,"advisoryUrl":"https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd"}],"moreVulnerabilities":49,"upgrade":{"recommended":"9.0.123"},"notes":["9 Apache Tomcat vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T23:07:50.629Z"}