CVE-2026-53434

9.1 Critique

Publiée le 29/06/2026 à 23:16 · Modifiée le 02/07/2026 à 21:06 · Analysée par le NVD · Source : security@apache.org

Description

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.

Traduire en français

Produits concernés

Apache Software Foundation Apache Tomcat
Apache tomcat

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.1 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-390

Références

https://lists.apache.org/thread/x510lbq0sfrd1qyo7q3r1mpllgpdcosk Vendor AdvisoryMailing List
http://www.openwall.com/lists/oss-security/2026/06/29/22 Third Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories