Apache-Tomcat

Apache Tomcat Split-Collection Security Constraint Bypass (CVE-2026-43515) newCVE-2026-43515webHIGHPatched2026-07-05Apache Tomcat LoadBalancerDrainingValve — Cross-System Open Redirect / Session Fixation (CVE-2026-25854) newCVE-2026-25854webMEDIUM 6.1Patched2026-07-05