Apache Tomcat Native

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 23, 2026
Last mentionedSep 23, 2026

Timeline

3 articles · newest first

CVE-2026-86247: Apache Tomcat Native: Client certificate requirements can be down-graded

Apache Tomcat Native CVE-2026-86247 can downgrade client-certificate checks via a race condition.

oss-securitySep 23, 16:59 UTC · Sep 23, 2026VulnerabilityCVE-2026-862474 · 2 reads

CVE-2026-86246: Apache Tomcat Native: Insecure OpenSSL options enabled

Apache Tomcat Native enables insecure OpenSSL options by default, tracked as CVE-2026-86246.

oss-securitySep 23, 16:56 UTC · Sep 23, 2026Vulnerability 9 sourcesCVE-2026-862463 · 2 reads

CVE-2026-86243: Apache Tomcat Native: DoS via TLS handshake

CVE-2026-86243 buffer over-read in Apache Tomcat Native can crash the JVM during TLS handshake.

oss-securitySep 23, 16:54 UTC · Sep 23, 2026Vulnerability 9 sourcesCVE-2026-862433

Related CVEs

by mentions

CVE-2026-862469.1
Insecure TLS defaults in Apache Tomcat Native enable man-in-the-middle decryption
published Sep 23, 2026Apache Tomcat Native
CVE-2026-862437.5
TLS Handshake Buffer Over-Read Enables Remote DoS in Apache Tomcat Native
published Sep 23, 2026Apache Software Foundation Apache Tomcat Native
CVE-2026-862477.4
Race Condition in Apache Tomcat Native Weakens TLS Client Certificate Verification
published Sep 23, 2026Apache Software Foundation Apache Tomcat Native

Appears with

Apache Software Foundationorganization · 3
Apachevendor · 2
Apache Software Foundationvendor · 1

Entities are extracted by the model from each article. First seen Sep 23, 2026, last mentioned Sep 23, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.