CVE-2026-53434

Published: Jun 29, 2026Modified: Jul 2, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.

Affected (3)

Products: Apache: Tomcat

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Tomcat	From 10.1.0 to 10.1.56
Apache Tomcat	From 11.0.0 to 11.0.23
Apache Tomcat	From 9.0.83 to 9.0.119

Related CWEs

Detection of Error Condition Without Action

The product detects a specific error, but takes no actions to handle the error.

References (2)

https://lists.apache.org/thread/x510lbq0sfrd1qyo7q3r1mpllgpdcosk

Source: security@apache.org

Vendor AdvisoryMailing List

http://www.openwall.com/lists/oss-security/2026/06/29/22

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.