CVE-2026-29145
CRITICALApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled
Title source: cnaExploitation Summary
EIP tracks 4 public exploits for CVE-2026-29145. PoCs published by adminlove520, Chenjp, sancliffe.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2026-29145, an authentication bypass vulnerability in Apache Tomcat's Mutual TLS (CLIENT_CERT) implementation. The PoC includes scripts to set up a vulnerable environment, generate certificates, and test the exploit scenario where OCSP checks fail, allowing unauthorized access.
Description
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue.
Exploits (4)
This repository contains a functional proof-of-concept for CVE-2026-29145, an authentication bypass vulnerability in Apache Tomcat's Mutual TLS (CLIENT_CERT) implementation. The PoC includes scripts to set up a vulnerable environment, generate certificates, and test the exploit scenario where OCSP checks fail, allowing unauthorized access.
This repository contains a functional proof-of-concept for CVE-2026-29145, an authentication bypass in Apache Tomcat's Mutual TLS (CLIENT_CERT) implementation due to improper OCSP soft-fail handling. It includes a Docker-based testing environment, certificate generation scripts, and a Python exploit script to demonstrate the vulnerability.
This repository contains a functional proof-of-concept for CVE-2026-29145, an authentication bypass in Apache Tomcat's Mutual TLS (CLIENT_CERT) implementation. It includes a Docker-based testing environment, certificate generation scripts, and a Python exploit script to demonstrate the vulnerability.
The repository contains a functional PoC for CVE-2026-29145, demonstrating an authentication bypass in Apache Tomcat due to improper OCSP checks. The exploit leverages a scenario where OCSP responses with 'Unknown' status are incorrectly treated as valid, allowing unauthorized access.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N