Critical 2 vendors · 2 advisories

CVE-2026-29145

Unified cross-vendor view: this CVE is referenced by 2 tracked vendors. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

Critical9.1Apache Tomcat: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in A…Apr 9, 2026

Linux1 advisory

Medium5.9Authentication bypass due to CLIENT_CERT soft fail misconfigurationApr 9, 2026