High Exploited CISA KEV 2 vendors · 3 advisories

CVE-2026-29146

CVE-2026-29146: high-severity vulnerability covered by 3 tracked advisory records across Apache, Red Hat. Compare affected products, fixed versions and…

NVD detail CVE.org

Android app · Google Play

Turn CVE research into alerts on your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Apache2 advisories

High7.5High [CVE-2026-29146 +1] Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorApr 9, 2026
High7.5High [CVE-2026-29146] Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by defaultApr 9, 2026

Red Hat1 advisory

High7.5High [CVE-2026-29146] Information disclosure via Padding Oracle vulnerability in EncryptInterceptorApr 9, 2026