Securityboulevard

Critical Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed

First seen 2 Nov 2025, 16:14 UTC • Thecyberexpress

•43.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The Apache Software Foundation has announced two critical vulnerabilities, CVE-2025-55752 and CVE-2025-55754, affecting Apache Tomcat versions 9, 10, and 11. CVE-2025-55752 is a directory traversal vulnerability that can lead to remote code execution, classified as 'Important' severity. System administrators are advised to take immediate action to mitigate these risks.

How this analysis works

Attack Flow

Continue Reading

CISA Warns of Critical Exploits in Langflow, Tomcat, and N-central Flaws Operation Escaneo Targets Latin American Critical Infrastructure Ivanti Sentry Vulnerabilities Allow Remote Code Execution and Admin Access Spring Framework RCE Vulnerability CVE-2022-22965 Exploited in the Wild SAP Addresses Critical Vulnerabilities in July 2026 Security Updates Broadcom Enhances Spring and Java Security Amid AI Threat Surge

Critical Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading