Search: CVE-2026-74048

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.2%	CVE-2026-74048Apache Tomcat · Failing Open MediumEPSS 0.2%2026-10-20CVE Database V5CVE-2026-74048 Apache Tomcat contains a 'Failing Open' vulnerability (CWE-636) when configured to use OpenSSLLifecycleListener in FIPS mode. If FIPS activation fails, Tomcat logs an error but continues operating in non-FIPS mode with the given configuration. This affects versions 9.0.92 through 9.0.122, 10.1.22 through 10.1.60, and 11.0.0-M14 through 11.0.26. Upgrading to versions 9.0.123, 10.1.61, or 11.0.27 resolves the issue. EPSS 0.2%Vulnerability Apache Software Foundation CWE-636	CVE Database V5	2026-10-20

Page 1 of 1 · 3 duplicate CVE records merged