NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#tomcat-native

0 stories this week · 0 this month · 3 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

oss-securitySep 23, 2026

CVE-2026-86247: Apache Tomcat Native: Client certificate requirements can be down-graded

Apache Tomcat Native CVE-2026-86247 can downgrade client-certificate checks via a race condition.

apache tomcat-native

4

oss-securitySep 23, 2026high

CVE-2026-86243: Apache Tomcat Native: DoS via TLS handshake

CVE-2026-86243 buffer over-read in Apache Tomcat Native can crash the JVM during TLS handshake.

9 sources apache tomcat-native

3