> CVE-2026-29129

« BACK_TO_HOME
PUBLISHED
2026-04-09 20:16
MODIFIED
2026-04-09 20:16
EPSS (Prob. Exploit)
0.26%
Top 81.8%
DATA SOURCES:
NVD 🔗 2026-04-09 RED HAT 🔗 2026-04-12 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05 OSV 🔗 2026-11-02

> DESCRIPTION

Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.0.115. Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Low

> GITHUB SECURITY ADVISORY

GHSA-69cc-cv78-qc8g HIGH

Apache Tomcat: Configured cipher preference order not preserved

AFFECTED PACKAGES:
MAVEN / org.apache.tomcat:tomcat-coyote
>= 11.0.16, < 11.0.20
Fixed in: 11.0.20
MAVEN / org.apache.tomcat:tomcat-coyote
>= 10.1.51, < 10.1.53
Fixed in: 10.1.53
MAVEN / org.apache.tomcat:tomcat-coyote
>= 9.0.114, < 9.0.116
Fixed in: 9.0.116
MAVEN / org.apache.tomcat.embed:tomcat-embed-core
>= 11.0.16, < 11.0.20
Fixed in: 11.0.20
MAVEN / org.apache.tomcat.embed:tomcat-embed-core
>= 10.1.51, < 10.1.53
Fixed in: 10.1.53
MAVEN / org.apache.tomcat.embed:tomcat-embed-core
>= 9.0.114, < 9.0.116
Fixed in: 9.0.116
MAVEN / org.apache.tomcat:tomcat
>= 11.0.16, < 11.0.20
Fixed in: 11.0.20
MAVEN / org.apache.tomcat:tomcat
>= 10.1.51, < 10.1.53
Fixed in: 10.1.53
MAVEN / org.apache.tomcat:tomcat
>= 9.0.114, < 9.0.116
Fixed in: 9.0.116

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Tomcat: TLS cipher order is not preserved

AFFECTED PACKAGES:
Unknown / Unknown
ALIASES:
BIT-tomcat-2026-29129, GHSA-69cc-cv78-qc8g

> HISTORIQUE DES MODIFICATIONS

Première apparition
09/04/2026 20:16
Source: NVD
📊 ENRICHISSEMENT 12/04/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 23:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 22:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 21:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 20:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 19:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 18:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 17:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 16:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 15:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 14:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 13:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
{ "severity_scale": null, "threat_severity": "Low" }
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 12:30
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/04/2026 12:30
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 14 Dernière mise à jour: 6 months ago

> REFERENCES

https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
« BACK_TO_HOME