Apache Software Foundation Apache Tomcat Native

• CVE-2026-86247 High 7.4 Apache Tomcat Native: Client certificate requirements can be down-graded 0.2%
• CVE-2026-86246 Critical 9.1 Apache Tomcat Native: Insecure OpenSSL options enabled 0.3%
• CVE-2026-86243 High 7.5 Apache Tomcat Native: DoS via TLS handshake 0.6%
• CVE-2026-29145 Critical 9.1 Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled 0.7%
• CVE-2026-24734 High 7.4 Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass 0.6%