Sploitus

2 exploited vulnerabilities in Apache Tomcat Native

Vulnerabilities with publicly known exploits

Vendors
Apache, Atlassian, Red Os, Rocky Linux
With known exploits
2
Affected Apache Tomcat versions
< 9.0.116, 10.1.53, 11.0.20, 10.1.0, 9.0.115, 10.1.52, 11.0.18, 11.0.0
Affected Apache Tomcat Native versions
< 1.3.7, 2.0.14

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2026-29145 2 exploits
CVSS 9.1 CRITICAL 2026-03-23FIX AVAILABLE
CVE-2026-24734
CVSS 7.5 HIGH 2026-01-01FIX AVAILABLE