Vulnerabilityhigh
CVE-2026-86243: Apache Tomcat Native: DoS via TLS handshake
AI summary · grok-4.7Summaries by Vani AI
CVE-2026-86243 buffer over-read in Apache Tomcat Native can crash the JVM during TLS handshake.
Apache rates CVE-2026-86243 important. A buffer over-read in Apache Tomcat Native during the TLS handshake lets a malicious user crash the JVM and cause a denial of service. Affected releases are 2.0.0 through 2.0.15 and 1.3.0 through 1.3.8; earlier unsupported versions may also be affected. The disclosure does not report active exploitation.
Key facts
- Important-severity buffer over-read during the TLS handshake
- A malicious handshake can crash the JVM and cause DoS
- Affects Tomcat Native 1.3.0–1.3.8 and 2.0.0–2.0.15
- Disclosure does not report observed exploitation
- CVEs
- CVE-2026-86243
- Vendors
- Apache
- Products
- Apache Tomcat Native
- Organizations
- Apache Software Foundation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-86243 | TLS Handshake Buffer Over-Read Enables Remote DoS in Apache Tomcat Native | 7.5 | — |
From the original article
Posted by Mark Thomas on Sep 23 Severity: important Affected versions: - Apache Tomcat Native 2. 0. 0 through 2.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.