APACHE TOMCAT VULNERABILITY ACTIVELY EXPLOITED JUST 30 HOURS AFTER PUBLIC DISCLOSURE

Summary from the TLDR InfoSec newsletter

CVE-2025-24813 in Apache Tomcat is under active exploitation 30 hours post-disclosure. The vulnerability enables remote code execution through malicious serialized Java uploads via PUT requests, no authentication is required. It is critical to update to versions 9.0.99, 10.1.35, and 11.0.3 ASAP.