TN
Product
Tomcat Native
by Apache · last CVE Sep 23, 2026
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch

Add Tomcat Native to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86246
9.1
0%
Sep 23
Apache Tomcat Native: Insecure OpenSSL options enabled
Affected: 1.3.0 before 1.3.9; 2.0.0 before 2.0.16
CVE-2026-29145
9.1
1%
Apr 9
Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled
Affected: 1.1.23 before 1.3.7; 2.0.0 before 2.0.14
Showing 2