Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

Apache Tomcat

What is Apache Tomcat Vulnerabilities:...

Key Takeaways Most Tomcat risk comes from known, unpatched CVEs on old or end-of-life builds. High-impact flaws like CVE-2025-24813 and Ghostcat need specific risky settings to fire. Detection starts with...

TuxCare Delivers New Endless Lifecycle...

PALO ALTO, Calif. – May 13, 2025 – TuxCare, a global innovator in securing open source, today announced it once again added to its expansive portfolio of Endless Lifecycle Support...

ELS for Apache Tomcat: Extending...

Introduction   Web applications remain the backbone of countless business operations. Behind many of these critical applications stands Apache Tomcat, one of the most widely deployed Java servlet containers powering...

Introduction to Apache Tomcat: A...

Apache Tomcat is an open-source web server and servlet container for Java applications. It supports servlets, JSPs, session management, security features, and scalability. TuxCare’s Endless Lifecycle Support (ELS) offers automated...