tag
Tomcat
Critical
Apache Tomcat Tribes EncryptInterceptor Fail-Open Unauthenticated RCE (CVE-2026-34486)
CVE-2026-34486·
Apache Tomcat Tribes clustering (EncryptInterceptor)
patched
Critical
Apache Tomcat Mutual TLS OCSP Soft-Fail Authentication Bypass — CVE-2026-29145
CVE-2026-29145·
Apache Tomcat (CLIENT_CERT / Mutual TLS authentication)
unpatched