Tomcat

Apache Tomcat Tribes EncryptInterceptor Fail-Open Unauthenticated RCE (CVE-2026-34486) new KEV EPSS 99%CVE-2026-34486webCRITICALPatched2026-07-05Apache Tomcat Mutual TLS OCSP Soft-Fail Authentication Bypass — CVE-2026-29145 newCVE-2026-29145webCRITICAL 9.1Patched2026-07-05