Tag

#tomcat

1 post tagged #tomcat.

Field Note · Jun 22, 2026 · Colten Anderson

Patch Tomcat now, but the four-condition RCE probably isn't pointed at you

CVE-2025-24813 carries a 9.8 and a KEV listing, but real-world RCE needs four config conditions to all line up. Here's how to triage it against your actual deployment instead of the headline.