What’s Vulnerable › Products

Apache Software Foundation Apache Tomcat Native vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Apache Software Foundation Apache Tomcat Native version is affected

Latest Apache Software Foundation Apache Tomcat Native vulnerabilities

• CVE-2026-86247 — Apache Tomcat Native: Client certificate requirements can be down-graded (CVSS 7.4)
• CVE-2026-86246 — Apache Tomcat Native: Insecure OpenSSL options enabled (CVSS 9.1)
• CVE-2026-86243 — Apache Tomcat Native: DoS via TLS handshake (CVSS 7.5)
• CVE-2026-29145 — Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVSS 9.1)
• CVE-2026-24734 — Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass (CVSS 7.5)
• CVE-2018-8020 — (CVSS 7.4)
• CVE-2018-8019 — (CVSS 7.4)
• CVE-2017-15698 — (CVSS 5.9)