CVE-2026-53434
Critical · 9.1CVSS
9.1
EPSS
0.6%
Published
Jun 29, 2026
CISA due date
—
The record
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-114137 Django REST framework is a toolkit for building Web APIs. CWE-390
- CVE-2026-76642 util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status… CWE-390
- CVE-2026-59845 A flaw was found in libssh. CWE-390
- CVE-2026-48792 pam_usb provides hardware authentication for Linux using ordinary removable media. CWE-390
- CVE-2026-44310 Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC… CWE-390
- CVE-2025-0029 Improper handling of error condition during host-induced faults can allow a local… CWE-390
- CVE-2025-26465 A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. CWE-390
- CVE-2024-12086 A flaw was found in rsync. CWE-390