RHSA-2026:36789: CVEs fixed (Red Hat)

RHSA-2026:36789 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-34486 HIGH 7.5 EXPLOITED DOWNGRADE DOWNGRADE Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• CVE-2026-29146 HIGH 7.5 UPGRADE Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue aff

Applies to

• RHEL 10.0 Extended Update Support · fixed in tomcat9-9.0.87-6.el10_0

← Back to latest CVEs