Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

20 matches found

RedHat Linux
RedHat Linux•added 2026/11/03 1:52 p.m.•6 views

tomcat-native: Apache Tomcat Native: Weakened TLS connection security via insecure default configuration

A flaw was found in Apache Tomcat Native, which enabled several insecure OpenSSL options by default: ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF, and ALLOWNODHEKEX. These defaults can weaken TLS protections. Apache Tomcat Native versions 1.3.0 through 1.3.8 and 2.0.0...

9.1CVSS5.1AI score0.00347EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux•added 2026/11/03 1:49 p.m.•7 views

tomcat-native: Apache Tomcat Native: Weakened TLS connection security via insecure default configuration

A flaw was found in Apache Tomcat Native, which enabled several insecure OpenSSL options by default: ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF, and ALLOWNODHEKEX. These defaults can weaken TLS protections. Apache Tomcat Native versions 1.3.0 through 1.3.8 and 2.0.0...

9.1CVSS5.1AI score0.00347EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE•added 2026/10/08 7:53 a.m.•14 views

CVE-2026-86246

A flaw was found in Apache Tomcat Native, which enabled several insecure OpenSSL options by default: ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF, and ALLOWNODHEKEX. These defaults can weaken TLS protections. Apache Tomcat Native versions 1.3.0 through 1.3.8 and 2.0.0...

9.1CVSS5.1AI score0.00347EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE•added 2026/09/24 4:26 p.m.•22 views

SUSE CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

6.5CVSS5.2AI score0.00347EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus•added 2026/09/24 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2026-86246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References3
NVD
NVD•added 2026/09/23 1:17 p.m.•25 views

CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS0.00347EPSS
SaveExploits0References2
osv_debian
osv_debian•added 2026/09/23 1:17 p.m.•19 views

DEBIAN-CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References1
osv_alpine
osv_alpine•added 2026/09/23 1:17 p.m.•6 views

ALPINE-CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/09/23 1:17 p.m.•22 views

UBUNTU-CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/09/23 1:17 p.m.•19 views

CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/09/23 12:26 p.m.•13 views

CVE-2026-86246 Apache Tomcat Native: Insecure OpenSSL options enabled

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

5.2AI score0.00347EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/23 12:26 p.m.•59 views

CVE-2026-86246

Apache Tomcat Native (versions 1.3.0 through 1.3.8 and 2.0.0 through 2.0.15) is vulnerable to an insecure default configuration where several risky OpenSSL options are enabled by default. These options include ALLOW_CLIENT_RENEGOTIATION , NO_EXTENDED_MASTER_SECRET , IGNORE_UNEXPECTED_EOF , and AL...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References2Affected Software1
Mend
Mend•added 2026/09/23 12:26 p.m.•10 views

CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.3CVSS5.2AI score0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/09/23 12:26 p.m.•51 views

CVE-2026-86246 Apache Tomcat Native: Insecure OpenSSL options enabled

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

0.00347EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/23 12:26 p.m.•20 views

EUVD-2026-85268

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux•added 2026/09/23 12:26 p.m.•9 views

CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0
Debian CVE
Debian CVE•added 2026/09/23 12:26 p.m.•21 views

CVE-2026-86246

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0
osv_cve
osv_cve•added 2026/09/23 12:26 p.m.•19 views

CVE-2026-86246 Apache Tomcat Native: Insecure OpenSSL options enabled

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/23 12:00 a.m.•6 views

CVE-2026-86246: Initialization of a Resource with an Insecure Default

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/23 12:00 a.m.•16 views

CVE-2026-86246: Initialization of a Resource with an Insecure Default

Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOWCLIENTRENEGOTIATION, NOEXTENDEDMASTERSECRET, IGNOREUNEXPECTEDEOF and ALLOWNODHEKEX. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, fr...

9.1CVSS5.2AI score0.00347EPSS
SaveExploits0References4
Rows per page
Query Builder