AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-1240

https://access.redhat.com/errata/RHSA-2026:20405

https://access.redhat.com/errata/RHSA-2026:20406

https://access.redhat.com/security/cve/CVE-2026-29146

https://bugzilla.redhat.com/show_bug.cgi?id=2457020

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29146.json

[{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 6.2 on RHEL 10","defaultStatus":"affected","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:6.2::el10"]},{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 6.2 on RHEL 8","defaultStatus":"affected","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:6.2::el8"]},{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 6.2 on RHEL 9","defaultStatus":"affected","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:6.2::el9"]},{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 6.2.3","defaultStatus":"affected","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:6.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 5","defaultStatus":"affected","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:5"]}]

{"timestamp":"2026-04-10T18:17:02.531112Z","id":"CVE-2026-29146","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Apache Software Foundation","product":"Apache Tomcat","defaultStatus":"unaffected","versions":[{"version":"11.0.0-M1","lessThanOrEqual":"11.0.18","versionType":"semver","status":"affected"},{"version":"10.0.0-M1","lessThanOrEqual":"10.1.52","versionType":"semver","status":"affected"},{"version":"9.0.13","lessThanOrEqual":"9.0.115","versionType":"semver","status":"affected"},{"version":"8.5.38","lessThanOrEqual":"8.5.100","versionType":"semver","status":"affected"},{"version":"7.0.100","lessThanOrEqual":"7.0.109","versionType":"semver","status":"affected"}]}]

OR
          *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 11.0.0 up to (excluding) 11.0.20
          *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 9.0.13 up to (excluding) 9.0.116
          *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 10.0.0 up to (excluding) 10.1.53
          *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 7.0.100 up to (including) 7.0.109
          *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 8.5.38 up to (including) 8.5.100

Apache Software Foundation: https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w Types: Mailing List, Vendor Advisory

CVE: http://www.openwall.com/lists/oss-security/2026/04/09/24 Types: Mailing List, Third Party Advisory

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-209

CWE-642

http://www.openwall.com/lists/oss-security/2026/04/09/24

Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109.

Users are recommended to upgrade to version 11.0.19, 10.1.53 and 9.0.116, which fixes the issue.

https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w