VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 9, 2026· Updated Apr 14, 2026

CVE-2026-29129

CVE-2026-29129

Description

Configured cipher preference order not preserved vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.0.115.

Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.tomcat:tomcat-coyoteMaven
>= 9.0.114, < 9.0.1169.0.116
org.apache.tomcat:tomcat-coyoteMaven
>= 10.1.51, < 10.1.5310.1.53
org.apache.tomcat:tomcat-coyoteMaven
>= 11.0.16, < 11.0.2011.0.20
org.apache.tomcat:tomcatMaven
>= 9.0.114, < 9.0.1169.0.116
org.apache.tomcat:tomcatMaven
>= 10.1.51, < 10.1.5310.1.53
org.apache.tomcat:tomcatMaven
>= 11.0.16, < 11.0.2011.0.20
org.apache.tomcat.embed:tomcat-embed-coreMaven
>= 9.0.114, < 9.0.1169.0.116
org.apache.tomcat.embed:tomcat-embed-coreMaven
>= 10.1.51, < 10.1.5310.1.53
org.apache.tomcat.embed:tomcat-embed-coreMaven
>= 11.0.16, < 11.0.2011.0.20

Affected products

54

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.