Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-09 | 1 | Disclosure1 |
| 2026-04-11 | 1 | General1 |
| 2026-06-01 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Atlassian ❗ CVE-2026-29145 ❗ CVE-2026-22732 ❗ CVE-2026-22029 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-atlassian-3/ https://t.co/OQ4O0L0bCR
Post summary
The post announces three Atlassian product vulnerabilities (CVE‑2026‑29145, CVE‑2026‑22732, CVE‑2026‑22029) and directs readers to external links for further information.
A flaw in `Apache Tomcat`'s CLIENT_CERT authentication (CVE-2026-29145) may lead to unexpected access. Review configurations and monitor for updates. #ApacheTomcat #AuthBypass #infosec https://www.pulsepatch.io/posts/cve-2026-29145-apache-tomcat-client-cert-auth-bypass
Post summary
The post alerts to a flaw in Tomcat’s CLIENT_CERT authentication that could allow unintended access and advises reviewing configurations and keeping up with updates.
CVE-2026-29145 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue a… https://www.cve.org/CVERecord?id=CVE-2026-29145
Post summary
The text presents a brief vulnerability description and provides a link to the CVE record, focusing on the announcement of the issue rather than any exploitation or mitigation details.
17 of 17 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | tomcat | - | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat | 10.1.0 | - | - |
| App | apache | tomcat_native | - | - | - |