Critical severity9.1NVD Advisory· Published Jun 29, 2026· Updated Jul 2, 2026

CVE-2026-53434

Description

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118.

Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.

Apache/Tomcat2 versions
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*range: >=9.0.83,<9.0.119
- (no CPE)range: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118
osv-coords7 versions
pkg:bitnami/tomcat pkg:rpm/opensuse/tomcat&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/tomcat&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/tomcat10&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/tomcat10&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/tomcat11&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/tomcat11&distro=openSUSE%20Tumbleweed
< 9.0.101+ 6 more
- (no CPE)range: < 9.0.101
- (no CPE)range: < 9.0.119-160000.1.1
- (no CPE)range: < 9.0.119-1.1
- (no CPE)range: < 10.1.56-160000.1.1
- (no CPE)range: < 10.1.56-1.1
- (no CPE)range: < 11.0.23-160000.1.1
- (no CPE)range: < 11.0.23-1.1