{ "cveId": "CVE-2026-68569", "url": "https://patchblox.com/security/cve/CVE-2026-68569", "summary": "CVE-2026-68569 is fixed in 23 products on 1 platform, first by RHSA-2026:92863, released August 25, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "tomcat9: Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g", "description": "Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.", "published": "2026-08-25T21:59:17Z", "severity": "high", "cvss": 8.2, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "epss": 0.0046, "epssPercentile": 0.40139, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "jws6-tomcat", "release": "RHEL 10", "fixedVersion": "10.1.49-16.redhat_00016.1.el10jws", "fix": "RHSA-2026:73981", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-73981", "released": "2026-08-25T22:01:58Z" }, { "platform": "linux", "product": "jws7-tomcat", "release": "RHEL 10", "fixedVersion": "11.0.21-7.redhat_00006.1.el10jws", "fix": "RHSA-2026:76952", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-76952", "released": "2026-08-25T22:01:58Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 10", "fixedVersion": "10.1.49-2.el10_0", "fix": "RHSA-2026:92863", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92863", "released": "2026-08-25T22:00:37Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat", "release": "opensuse-leap 16.0", "fixedVersion": "9.0.121-160000.1.1", "fix": "OPENSUSE-SU-2026:21823-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21823-1", "released": "2026-09-09T14:18:23Z" }, { "platform": "linux", "product": "tomcat", "release": "rocky 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RLSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rlsa-2026-92869", "released": "2026-11-07T00:39:57Z" }, { "platform": "linux", "product": "tomcat", "release": "rocky 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RLSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rlsa-2026-93469", "released": "2026-11-07T00:39:57Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 15.6", "fixedVersion": "9.0.121-150200.120.1", "fix": "SUSE-SU-2026:4203-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4203-1", "released": "2026-09-16T08:19:50Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 15.7", "fixedVersion": "9.0.121-150200.120.1", "fix": "SUSE-SU-2026:4203-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4203-1", "released": "2026-09-16T08:19:50Z" }, { "platform": "linux", "product": "tomcat", "release": "sles 16.0", "fixedVersion": "9.0.121-160000.1.1", "fix": "SUSE-SU-2026:23720-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23720-1", "released": "2026-09-09T14:15:48Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-admin-webapps", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-docs-webapp", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-el-3.0-api", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat-el-5.0-api", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-jsp-2.3-api", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat-jsp-3.1-api", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-lib", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-servlet-4.0-api", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat-servlet-6.0-api", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "RHEL 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "RHSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-92869", "released": "2026-10-30T22:08:02Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "RHEL 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "RHSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/rhsa-2026-93469", "released": "2026-11-03T19:00:44Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ALSA-2026:92869", "url": "https://patchblox.com/security/fix/linux/alsa-2026-92869", "released": "2026-11-07T00:40:18Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "almalinux 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ALSA-2026:93469", "url": "https://patchblox.com/security/fix/linux/alsa-2026-93469", "released": "2026-11-07T00:41:11Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "ol 10", "fixedVersion": "1:10.1.49-5.el10_2", "fix": "ELSA-2026-92862", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92862", "released": "2026-11-07T00:59:15Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "ol 8", "fixedVersion": "1:9.0.121-1.el8_10", "fix": "ELSA-2026-92869", "url": "https://patchblox.com/security/fix/linux/elsa-2026-92869", "released": "2026-11-07T00:48:28Z" }, { "platform": "linux", "product": "tomcat-webapps", "release": "ol 9", "fixedVersion": "1:9.0.121-1.el9_8", "fix": "ELSA-2026-93469", "url": "https://patchblox.com/security/fix/linux/elsa-2026-93469", "released": "2026-11-07T00:52:27Z" }, { "platform": "linux", "product": "tomcat10", "release": "Debian 14", "fixedVersion": "10.1.60-1", "fix": "DEBIAN-CVE-2026-68569", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-68569", "released": "2026-08-27T00:27:02Z" }, { "platform": "linux", "product": "tomcat10", "release": "opensuse-leap 16.0", "fixedVersion": "10.1.59-160000.1.1", "fix": "OPENSUSE-SU-2026:21810-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21810-1", "released": "2026-09-08T15:47:18Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 15.6", "fixedVersion": "10.1.59-150200.5.79.1", "fix": "SUSE-SU-2026:4119-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4119-1", "released": "2026-09-10T08:16:50Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 15.7", "fixedVersion": "10.1.59-150200.5.79.1", "fix": "SUSE-SU-2026:4119-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4119-1", "released": "2026-09-10T08:16:50Z" }, { "platform": "linux", "product": "tomcat10", "release": "sles 16.0", "fixedVersion": "10.1.59-160000.1.1", "fix": "SUSE-SU-2026:23711-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23711-1", "released": "2026-09-08T15:49:49Z" }, { "platform": "linux", "product": "tomcat11", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11", "release": "opensuse-leap 16.0", "fixedVersion": "11.0.25-160000.1.1", "fix": "OPENSUSE-SU-2026:21811-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21811-1", "released": "2026-09-08T15:45:34Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 15.6", "fixedVersion": "11.0.25-150600.13.33.2", "fix": "SUSE-SU-2026:4114-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4114-1", "released": "2026-09-09T16:20:46Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 15.7", "fixedVersion": "11.0.25-150600.13.33.2", "fix": "SUSE-SU-2026:4114-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4114-1", "released": "2026-09-09T16:20:46Z" }, { "platform": "linux", "product": "tomcat11", "release": "sles 16.0", "fixedVersion": "11.0.25-160000.1.1", "fix": "SUSE-SU-2026:23710-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23710-1", "released": "2026-09-08T15:49:50Z" }, { "platform": "linux", "product": "tomcat11-admin-webapps", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11-docs-webapp", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11-el-6.0-api", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11-jsp-4.0-api", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11-lib", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11-servlet-6.1-api", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat11-webapps", "release": "amzn 2023", "fixedVersion": "1:11.0.26-1.amzn2023.0.1", "fix": "ALAS2023-2026-3151", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3151", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "tomcat9", "release": "Debian 12.15 (bookworm)", "fixedVersion": "9.0.70-2", "fix": "DEBIAN-CVE-2026-68569", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-68569", "released": "2026-08-27T00:27:02Z" }, { "platform": "linux", "product": "tomcat9", "release": "Debian 13.5 (trixie)", "fixedVersion": "9.0.70-2", "fix": "DEBIAN-CVE-2026-68569", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-68569", "released": "2026-08-27T00:27:02Z" }, { "platform": "linux", "product": "tomcat9", "release": "Debian 14", "fixedVersion": "9.0.70-2", "fix": "DEBIAN-CVE-2026-68569", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-68569", "released": "2026-08-27T00:27:02Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }