https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:33:48.739150+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-86246 CVE-2026-86246 — Apache Tomcat Native: Insecure OpenSSL options enabled 2026-09-28T07:33:48.740138+00:00

Affected: Apache Software Foundation Apache Tomcat Native

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier unsupported versions may also be affected.

Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fix the issue.