Cyber Resilience

CVE-2026-29146

Info Disclosure in Apache Tomcat 7.0.100 – 7.0.109

Info Disclosure
Published
09 April 2026
Modified
04 August 2026
Patch / advisory
View advisory
CVSS Score v3.1 7.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.063 93th percentile
Risk Priority 67 floored blend · peak EPSS

Summary

CVE-2026-29146 is a high-severity Generation of Error Message Containing Sensitive Information (CWE-209) vulnerability in Apache Tomcat. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Weaken Encryption (T1600); ranked in the top 7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-6 (Least Privilege) — see the control section below for these in your framework.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability is a Padding Oracle issue in Apache Tomcat's EncryptInterceptor when using the default configuration. It affects Apache Tomcat versions from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9.0.115, from 8.5.38 through 8.5.100, and from 7.0.100 through 7.0.109. This flaw is associated with CWEs 209 and 642 and carries a CVSS score of 7.5, indicating high impact on confidentiality.

An attacker can exploit this remotely without authentication to decrypt sensitive data by leveraging the padding oracle behavior in the encryption interceptor.

Advisories recommend upgrading to fixed versions 11.0.19, 10.1.53, and 9.0.116 to resolve the issue, as detailed in Apache Tomcat security lists and related oss-security postings. The EPSS score remains flat at 0.1292 with no material rise observed.

OWASP Top 10 for Web (2025)

A04:2025 Cryptographic FailuresA06:2025 Insecure DesignA10:2025 Mishandling of Exceptional Conditions

EU & UK References

Vulnerability Data

Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Users are recommended to upgrade…

more

to version 11.0.19, 10.1.53 and 9.0.116, which fixes the issue.

CWE(s)
CWE-209CWE-642CWE-1240

Related Threats

MITRE ATT&CK Enterprise Techniques

T1600 Weaken Encryption Defense Impairment
Adversaries may compromise a network device’s encryption capability in order to bypass encryption that would otherwise protect data communications.
attack.mitre.org →
T1134 Access Token Manipulation Stealth
Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls.
attack.mitre.org →
T1528 Steal Application Access Token Credential Access
Adversaries can steal application access tokens as a means of acquiring credentials to access remote systems and resources.
attack.mitre.org →
T1539 Steal Web Session Cookie Credential Access
An adversary may steal web application or service session cookies and use them to gain access to web applications or Internet services as an authenticated user without needing credentials.
attack.mitre.org →
T1552 Unsecured Credentials Credential Access
Adversaries may search compromised systems to find and obtain insecurely stored credentials.
attack.mitre.org →
T1552.001 Credentials In Files Credential Access
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2024-21733Same product: Apache Tomcat
CVE-2026-42498Same product: Apache Tomcat
CVE-2023-34981Same product: Apache Tomcat
CVE-2025-55668Same product: Apache Tomcat
CVE-2026-34487Same product: Apache Tomcat
CVE-2026-55955Same product: Apache Tomcat
CVE-2026-34500Same product: Apache Tomcat
CVE-2023-42794Same product: Apache Tomcat
CVE-2025-31650Same product: Apache Tomcat
CVE-2026-50229Same product: Apache Tomcat

Affected Assets

apache
tomcat
7.0.100 — 7.0.109 · 8.5.38 — 8.5.100 · 9.0.13 — 9.0.116

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

—

Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)
  • 16 hardening rules · 4 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V16.5.1
  • V8.4.2

Mitigating Controls (NIST 800-53 r5) AI

AC-3 Access Enforcement good match

Enforces access authorizations on the stored critical state data so unauthorized actors cannot read or modify it.

SI-11 Error Handling good match

si-11 directly requires error messages to avoid revealing exploitable information about the system or its data.

AC-6 Least Privilege good match

Limits which subjects may access the location holding security-critical state, reducing the set of actors that can tamper with it.

SC-28 Protection of Information at Rest partial match

Requires cryptographic or other protection of information at rest, directly blocking unauthorized external access to critical state.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.DS-01 full match
prevents

Protecting integrity of data-at-rest stops external tampering with stored security-critical state.

PR.AA-05 mostly match
prevents

Enforcing least-privilege access permissions directly prevents unauthorized actors from reaching critical state data.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly require sanitized error handling to prevent sensitive data disclosure.

PR.IR-01 partial match
prevents

Network-level controls reduce the attack surface that would otherwise allow external modification of state.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.24 Use of cryptography mostly match
prevents

Mandates approved cryptographic controls, directly preventing use of risky or non-compliant implementations.

A.8.27 Secure system architecture and engineering principles mostly match
prevents

Secure architecture principles discourage external control of security-critical state.

A.8.28 Secure coding mostly match
prevents

Secure coding standards explicitly forbid exposing sensitive data in errors.

A.8.29 Security testing in development and acceptance mostly match
finds

Security testing can detect error messages that leak sensitive information.

A.8.3 Information access restriction mostly match
prevents

Information access restriction mechanisms enforce least-privilege access to critical state.

A.5.15 Access control partial match
prevents

Access control policies directly limit who can read or modify security-critical state data.

Hardening callouts derived

Configuration rules from DISA STIG baselines that bear on weaknesses of the type cited by this CVE. Each rule is shown with the relationship its mapping actually records, against the CWE it was authored against. Derived via CVE→CWE over `controls_xwalks` (authoritative rows only; rows rated `none` are excluded).

Oracle Linux 8 (3 rules)
  • V-248524 OL 8 must implement NIST FIPS-validated cryptography for the following: To provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards. prevents CWE-1240
  • V-248525 All OL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at-rest protection. prevents CWE-642
  • V-248534 OL 8 must employ FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords. prevents CWE-1240
Oracle Linux 9 (3 rules)
  • V-271628 OL 9 must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords. prevents CWE-1240
  • V-271811 OL 9 /etc/passwd- file must have mode 0644 or less permissive to prevent unauthorized access. prevents CWE-642
  • V-271756 OL 9 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection. prevents CWE-642
RHEL 7 (1 rule)
  • V-204627 SNMP community strings on the Red Hat Enterprise Linux operating system must be changed from the default. prevents CWE-642
RHEL 8 (2 rules)
  • V-230223 RHEL 8 must implement NIST FIPS-validated cryptography for the following: To provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards. prevents CWE-1240
  • V-230224 All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection. prevents CWE-1240

References