diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index b959d27200c..270886ba050 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -38,7 +38,7 @@
         <cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
         <cxf.swagger.ui.version>5.32.1</cxf.swagger.ui.version>
         <cxf.tika.version>3.3.0</cxf.tika.version>
-        <cxf.tomcat.version>11.0.20</cxf.tomcat.version>
+        <cxf.tomcat.version>11.0.21</cxf.tomcat.version>
         <cxf.jboss.weld.version>6.0.4.Final</cxf.jboss.weld.version>
         <cxf.gson.version>2.13.2</cxf.gson.version>
         <cxf.lucene.version>10.4.0</cxf.lucene.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index e9789a5e9c9..b938889cbb1 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -224,7 +224,7 @@
         <cxf.swagger.ui.version>5.32.1</cxf.swagger.ui.version>
         <cxf.swagger.v3.version>2.2.45</cxf.swagger.v3.version>
         <cxf.tika.version>3.3.0</cxf.tika.version>
-        <cxf.tomcat.version>11.0.20</cxf.tomcat.version>
+        <cxf.tomcat.version>11.0.21</cxf.tomcat.version>
         <cxf.tomitribe.http.signature.version>1.8</cxf.tomitribe.http.signature.version>
         <cxf.undertow.version>2.4.0.RC4</cxf.undertow.version>
         <cxf.undertow.ee.version>2.0.0.RC1</cxf.undertow.ee.version>