CVE-2026-53434
Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS probability
- 0.55%
- CWE
- CWE-390
- Published
- 2026-06-29
- Last modified
- 2026-06-30
Affected products
- Apache Software Foundation Apache Tomcat
- Apache Software Foundation Apache Tomcat
- Apache Software Foundation Apache Tomcat
- Apache Software Foundation Apache Tomcat
Weakness type
Related vulnerabilities
- CVE-2026-76642 — util-linux libmount Privilege Escalation via Failed Mount Helper
- CVE-2026-59845 — Libssh: libssh: denial of service via unchecked proxycommand fork() failure
- CVE-2026-48792 — pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution
- CVE-2026-44310 — gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers
- CVE-2025-0029 — Improper handling of error condition during host-induced faults can allow a local high-privileged...
- CVE-2025-46367 — Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error...
- CVE-2025-27039 — Detection of Error Condition Without Action in Computer Vision
- CVE-2024-49841 — Detection of Error Condition Without Action in Hypervisor