oss-security·3d agoCVE-2026-86248: Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled#apache#tomcat#cve-2026-86248CVE-2026-34500 15 sources