ALAS2023-2026-3166: CVEs fixed (Amazon Linux)

ALAS2023-2026-3166 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-76183 CRITICAL 9.8 Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for an
• CVE-2026-86248 CRITICAL 9.8 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerabili

Applies to

• Amazon Linux 2023

← Back to latest CVEs