CVE-2026-24733 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-24733 Interim 1 1 2026-03-05T00:16:18Z current 2026-03-05T00:16:18Z 2026-03-05T00:16:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-24733 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, the user could bypass that constraint on GET requests by sending a (specification invalid) HEAD request using HTTP/0.9. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0.M1 through 9.0.112. Older, EOL versions are also affected. Users are recommended to upgrade to version 11.0.15 or later, 10.1.50 or later or 9.0.113 or later, which fixes the issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Web and Scripting 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-3_0-api tomcat-embed tomcat-javadoc tomcat-jsp-2_3-api tomcat-jsvc tomcat-lib tomcat-servlet-3_1-api tomcat-servlet-4_0-api tomcat-webapps tomcat10 tomcat10-admin-webapps tomcat10-doc tomcat10-docs-webapp tomcat10-el-5_0-api tomcat10-embed tomcat10-jsp-3_1-api tomcat10-jsvc tomcat10-lib tomcat10-servlet-6_0-api tomcat10-webapps tomcat11 tomcat11-admin-webapps tomcat11-doc tomcat11-docs-webapp tomcat11-el-6_0-api tomcat11-embed tomcat11-jsp-4_0-api tomcat11-jsvc tomcat11-lib tomcat11-servlet-6_1-api tomcat11-webapps tomcat as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat-lib as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS tomcat as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat-lib as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10-admin-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10-el-5_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10-lib as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat10-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS tomcat as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat-admin-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat-lib as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10-admin-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10-lib as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat10-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11-admin-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11-el-6_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11-jsp-4_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11-lib as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11-servlet-6_1-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat11-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP7 tomcat as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-servlet-3_1-api as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP2-LTSS tomcat as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP5-LTSS tomcat as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security tomcat as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP2-LTSS tomcat as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP3-LTSS tomcat as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP4-LTSS tomcat as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10-lib as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat10-webapps as a component of SUSE Linux Enterprise Server 15 SP5-LTSS tomcat as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10-lib as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat10-webapps as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11-el-6_0-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11-jsp-4_0-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11-lib as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11-servlet-6_1-api as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat11-webapps as a component of SUSE Linux Enterprise Server 15 SP6-LTSS tomcat as a component of SUSE Linux Enterprise Server 16.0 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 16.0 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 16.0 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 16.0 tomcat-embed as a component of SUSE Linux Enterprise Server 16.0 tomcat-javadoc as a component of SUSE Linux Enterprise Server 16.0 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 16.0 tomcat-jsvc as a component of SUSE Linux Enterprise Server 16.0 tomcat-lib as a component of SUSE Linux Enterprise Server 16.0 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 16.0 tomcat-webapps as a component of SUSE Linux Enterprise Server 16.0 tomcat10 as a component of SUSE Linux Enterprise Server 16.0 tomcat10-admin-webapps as a component of SUSE Linux Enterprise Server 16.0 tomcat10-doc as a component of SUSE Linux Enterprise Server 16.0 tomcat10-docs-webapp as a component of SUSE Linux Enterprise Server 16.0 tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Server 16.0 tomcat10-embed as a component of SUSE Linux Enterprise Server 16.0 tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Server 16.0 tomcat10-jsvc as a component of SUSE Linux Enterprise Server 16.0 tomcat10-lib as a component of SUSE Linux Enterprise Server 16.0 tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Server 16.0 tomcat10-webapps as a component of SUSE Linux Enterprise Server 16.0 tomcat11 as a component of SUSE Linux Enterprise Server 16.0 tomcat11-admin-webapps as a component of SUSE Linux Enterprise Server 16.0 tomcat11-doc as a component of SUSE Linux Enterprise Server 16.0 tomcat11-docs-webapp as a component of SUSE Linux Enterprise Server 16.0 tomcat11-el-6_0-api as a component of SUSE Linux Enterprise Server 16.0 tomcat11-embed as a component of SUSE Linux Enterprise Server 16.0 tomcat11-jsp-4_0-api as a component of SUSE Linux Enterprise Server 16.0 tomcat11-jsvc as a component of SUSE Linux Enterprise Server 16.0 tomcat11-lib as a component of SUSE Linux Enterprise Server 16.0 tomcat11-servlet-6_1-api as a component of SUSE Linux Enterprise Server 16.0 tomcat11-webapps as a component of SUSE Linux Enterprise Server 16.0 tomcat as a component of SUSE Linux Enterprise Server Teradata 12 SP3 tomcat as a component of SUSE Linux Enterprise Server Teradata 15 SP4 tomcat as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 tomcat as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat10-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 tomcat as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat10-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11-el-6_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11-jsp-4_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11-servlet-6_1-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat11-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 tomcat as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-embed as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-javadoc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-jsvc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-lib as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat-webapps as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-admin-webapps as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-doc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-docs-webapp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-el-5_0-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-embed as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-jsp-3_1-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-jsvc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-lib as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-servlet-6_0-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat10-webapps as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-admin-webapps as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-doc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-docs-webapp as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-el-6_0-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-embed as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-jsp-4_0-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-jsvc as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-lib as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-servlet-6_1-api as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat11-webapps as a component of SUSE Linux Enterprise Server for SAP applications 16.0 tomcat as a component of openSUSE Leap 15.6 tomcat-admin-webapps as a component of openSUSE Leap 15.6 tomcat-docs-webapp as a component of openSUSE Leap 15.6 tomcat-el-3_0-api as a component of openSUSE Leap 15.6 tomcat-embed as a component of openSUSE Leap 15.6 tomcat-javadoc as a component of openSUSE Leap 15.6 tomcat-jsp-2_3-api as a component of openSUSE Leap 15.6 tomcat-jsvc as a component of openSUSE Leap 15.6 tomcat-lib as a component of openSUSE Leap 15.6 tomcat-servlet-4_0-api as a component of openSUSE Leap 15.6 tomcat-webapps as a component of openSUSE Leap 15.6 tomcat10 as a component of openSUSE Leap 15.6 tomcat10-admin-webapps as a component of openSUSE Leap 15.6 tomcat10-doc as a component of openSUSE Leap 15.6 tomcat10-docs-webapp as a component of openSUSE Leap 15.6 tomcat10-el-5_0-api as a component of openSUSE Leap 15.6 tomcat10-embed as a component of openSUSE Leap 15.6 tomcat10-jsp-3_1-api as a component of openSUSE Leap 15.6 tomcat10-jsvc as a component of openSUSE Leap 15.6 tomcat10-lib as a component of openSUSE Leap 15.6 tomcat10-servlet-6_0-api as a component of openSUSE Leap 15.6 tomcat10-webapps as a component of openSUSE Leap 15.6 tomcat11 as a component of openSUSE Leap 15.6 tomcat11-admin-webapps as a component of openSUSE Leap 15.6 tomcat11-doc as a component of openSUSE Leap 15.6 tomcat11-docs-webapp as a component of openSUSE Leap 15.6 tomcat11-el-6_0-api as a component of openSUSE Leap 15.6 tomcat11-embed as a component of openSUSE Leap 15.6 tomcat11-jsp-4_0-api as a component of openSUSE Leap 15.6 tomcat11-jsvc as a component of openSUSE Leap 15.6 tomcat11-lib as a component of openSUSE Leap 15.6 tomcat11-servlet-6_1-api as a component of openSUSE Leap 15.6 tomcat11-webapps as a component of openSUSE Leap 15.6 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, the user could bypass that constraint on GET requests by sending a (specification invalid) HEAD request using HTTP/0.9. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0.M1 through 9.0.112. Older, EOL versions are also affected. Users are recommended to upgrade to version 11.0.15 or later, 10.1.50 or later or 9.0.113 or later, which fixes the issue. CVE-2026-24733 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N