UpHeron
All vulnerabilities

Servers and applications

CVE-2026-74048

Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up

Severity
Unrated
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
20 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cna:apache software foundation|apache tomcat
  • From 9.0.92 up to 9.0.122
  • From 10.1.22 up to 10.1.60
  • From 11.0.0-M14 up to 11.0.26

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-74048