Skip to content

CVE record · 1 source

CVE-2026-74048

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat.

Vendor: Apache Software Foundation
Product: Tomcat
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 11d ago

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat.

Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with…

Fix available CVE-2026-74048 Apache Software Foundation