Apache Software Foundation Tomcat Native vulnerabilities

• apache tomcat native Apache Tomcat Native: Client certificate requirements can be down-graded CVE-2026-86247 Fix available 7.4 HighSeptember 23, 2026
• apache tomcat native Apache Tomcat Native: Insecure OpenSSL options enabled CVE-2026-86246 Fix available 9.1 CriticalSeptember 23, 2026
• apache tomcat native Apache Tomcat Native: DoS via TLS handshake CVE-2026-86243 Fix available 7.5 HighSeptember 23, 2026
• apache tomcat, tomcat native +1 more Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled CVE-2026-29145 Public exploitFix available 9.1 CriticalApril 9, 2026
• apache tomcat, tomcat native, red hat enterprise linux 10 +10 more +12 more Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass CVE-2026-24734 Fix available 7.5 HighFebruary 5, 2026
• apache tomcat native, debian linux +1 more Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check... CVE-2018-8020 Fix available 7.4 HighJuly 31, 2018
• apache tomcat native, debian linux +1 more When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not... CVE-2018-8019 Fix available 7.4 HighJuly 31, 2018
• apache tomcat native, debian linux +1 more When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... CVE-2017-15698 Fix available 5.9 MediumJanuary 31, 2018