Unrated severityNVD Advisory· Published Sep 23, 2026
CVE-2026-86247
CVE-2026-86247
Description
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.
This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.
Users are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.
Affected products
1- Range: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.