RHSA-2026:36788: CVEs fixed (Red Hat)

RHSA-2026:36788 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-34486 HIGH 7.5 EXPLOITED DOWNGRADE DOWNGRADE Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• CVE-2026-29146 HIGH 7.5 UPGRADE Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue aff

Applies to

• RHEL 10 · fixed in tomcat-10.1.49-3.el10_2

← Back to latest CVEs