Threats tagged 'ghsa-9p2m-jvmj-wh8q'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.3%	CVE-2026-86246 · Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including Critical9.1EPSS 0.3%2026-09-23GCVE Database Apache Tomcat Native versions 2.0.0 through 2.0.15 and 1.3.0 through 1.3.8 have a vulnerability where insecure default options are enabled during resource initialization. These options include ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF, and ALLOW_NO_DHE_KEX. This vulnerability is addressed in versions 2.0.16 and 1.3.9. The vulnerability has a CVSS score of 9.1, indicating high severity, with impacts on confidentiality and integrity but no impact on availability. EPSS 0.3%Report on CVE-2026-86246 Vulnerability CWE-1188 #ghsa-9p2m-jvmj-wh8q	GCVE Database	2026-09-23

Page 1 of 1