RHSA-2026:36787: CVEs fixed (Red Hat)

RHSA-2026:36787 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-34486 HIGH 7.5 EXPLOITED DOWNGRADE DOWNGRADE Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• CVE-2026-29146 HIGH 7.5 UPGRADE Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue aff

Applies to

• RHEL 10.0 Extended Update Support · fixed in tomcat-10.1.36-2.el10_0

← Back to latest CVEs