Is Apache Tomcat 6.0.53 patched?
Current stable (11.0.27): 100/100
6.0.53 has 3 open critical-or-high vulnerabilities. Run 9.0.121 or later to clear them. See what 9.0.121 fixes →
Summary iPlain-English security status for Apache Tomcat 6.0.53, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Apache Tomcat 6.0.53 is part of the 6.0 release line. 6 known vulnerabilities affect it. The minimum safe version is 9.0.121 — upgrade to it or later to clear the open critical/high issues. The latest supported Apache Tomcat release is 11.0.27.
Known issues affecting 6.0.53
Exploited first, then by exploitation probability.
CVE-2026-55276 CRITICAL EPSS 0% → fixed in 11.0.23 CVE-2026-55955 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-55957 HIGH EPSS 0% → fixed in 11.0.5 CVE-2026-55956 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-50229 MEDIUM EPSS 0% → fixed in 11.0.23 CVE-2026-59083 CRITICAL EPSS 0% → see advisoryOther Apache Tomcat versions
Check another release line of Apache Tomcat.
Frequently asked
Is Apache Tomcat 6.0.53 patched?
Apache Tomcat 6.0.53 has 3 open critical-or-high vulnerabilities. The minimum safe version is 9.0.121 — upgrade to 9.0.121 or later to clear them.
What version should I upgrade Apache Tomcat 6.0.53 to?
Upgrade Apache Tomcat 6.0.53 to at least 9.0.121 to clear its 3 open critical-or-high vulnerabilities.
What is the latest version of Apache Tomcat?
The latest supported Apache Tomcat release is 11.0.27.
Is Apache Tomcat 6.0.53 still receiving security updates?
Yes — the 6.0 line is still supported and receiving security updates. The latest release is 11.0.27.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade — Apache Tomcat official site ↗