CVE-2026-29145-Tester

CVE-2026-29145 Testumgebung 📌 Überblick Dieses Repository enthält eine Proof-of-Concept-Umgebung PoC, die zum Testen von CVE-2026-29145 entwickelt wurde. Die Schwachstelle ist eine Authentifizierungsumgehung in Apache Tomcats Mutual-TLS-Implementierung CLIENTCERT. Wenn OCSP Online Certificate...

CVE-2026-29145-Tester

CVE-2026-29145 Testumgebung 📌 Überblick Dieses Repository enthält eine Proof-of-Concept-Umgebung PoC, die zum Testen von CVE-2026-29145 entwickelt wurde. Die Schwachstelle ist eine Authentifizierungsumgehung in Apache Tomcats Mutual-TLS-Implementierung CLIENTCERT. Wenn OCSP Online Certificate...

cve-2026-29145

CVE-2026-29145 — OCSP जाँच कभी-कभी सॉफ्ट-फेल हो जाती है, भले ही सॉफ्ट-फेल अक्षम हो खोजकर्ता: gregk4sec https://github.com/gregk4sec/cve खोज तिथि: 2026-02-26 प्रभावित विक्रेता: Apache प्रभावित उत्पाद: Tomcat गंभीरता: 9.1 CRITICAL CWE: CWE-287 अनुचित प्रमाणीकरण स्थिति: समीक्षााधीन / ठीक / निजी /...

tomcat9 security update

1:9.0.117-2 - Resolves: RHEL-185571 Remove tomcat clustering JAR from RPM builds 1:9.0.117-1 - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is...

Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. CVE-2026-25854: Occasionally open redirect bsc1261851. CVE-2026-29129: TLS cipher order is not preserved bsc1261852. CVE-2026-29145: OCSP checks sometimes...

SUSE-SU-2026:1604-1 Security update for tomcat

This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks...

SUSE-SU-2026:21378-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks sometimes soft-fail...

OPENSUSE-SU-2026:20611-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks sometimes soft-fail...

SUSE-SU-2026:21366-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...

BIT-TOMCAT-2026-29145 Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled

CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0 through 11.0.18, from 10.1.0 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: fr...