CVE-2026-86248 | Apache Tomcat up to 11.0.25/10.1.59/9.0.121 CLIENT_CERT Authentication improper authentication

September 23, 2026 Yanac

A vulnerability was found in Apache Tomcat up to 11.0.25/10.1.59/9.0.121. It has been rated as critical. This affects an unknown function of the component CLIENT_CERT Authentication. Performing a manipulation results in improper authentication.

This vulnerability was named CVE-2026-86248. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More