[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuU9eB7O4oM8ta2rDiDCTPsw4dL6F-cCYbvvvY0iMKQQ":3,"g5a-risk:CVE-2026-86246":119},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":27,"epssTimeSeries":34,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":56,"weaknesses":57,"weaknessesCount":43,"isActivelyExploited":66,"cisaInfo":27,"otxData":27,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":107,"notableEvents":108},"CVE-2026-86246","What is CVE-2026-86246?","Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default  including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 2.0.16 or 1.3.9, which fix the issue.","Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGO...","2026-09-23T13:17:31.117","2026-10-06T13:50:57.873",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":32},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,[],[],[],0.00347,[35,35,35,35,33,33,33],0.00361,"Critical",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"apache","tomcat_native","*","cpe:2.3:a:apache:tomcat_native:*:*:*:*:*:*:*:*",1,[45,51],{"url":46,"source":47,"tags":48},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fdgyvfwb24nbk45ptvlhdyhdhl5o7k5ol","Apache",[49,50],"Vendor Advisory","Mailing List",{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F09\u002F23\u002F32","Openwall",[50,55],"Third Party Advisory",2,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.","Developers often choose default values that leave the product as open and easy to use as possible out-of-the-box, under the assumption that the administrator can (or should) change the default value.  However, this ease-of-use comes at a cost when the default is insecure and the administrator does not change it.","Incomplete","Base","Simple",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2026-86246? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-86246, a critical severity cyber security vulnerability from 2026. Initialization of a resource with an insecure default v...","CVE-2026-86246, CVE-2026-86246 vulnerability, CVE-2026-86246 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, tomcat_native vulnerability","\u002Fwhat-is\u002Fcve-2026-86246",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":10,"dateModified":11,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-86246","Cybersecurity","CVE-2026-86246, CVE-2026-86246 vulnerability, CVE-2026-86246 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":27,"Negate":27,"Nodes":95},[96],{"Operator":97,"Negate":66,"CPEMatch":98},"OR",[99,103],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":100,"VersionStartExcluding":27,"VersionStartIncluding":101,"VersionEndExcluding":102,"VersionEndIncluding":27},"F73CA9D6-BD48-4223-B2AC-6F345E0895C6","1.3.0","1.3.9",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":27},"AC3D1E2E-A1EE-4F33-8D7F-11D37A8AAE66","2.0.0","2.0.16",[],[109],{"id":110,"eventType":111,"eventTime":112,"details":113,"label":114,"color":115},"45d93cb2-f2ae-4388-bfa7-293ddc380556","NEW_NVD","2026-09-24T04:01:38.489889+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":117,"version":118},1793197231184,"2.0",{"score":120,"band":121,"action":122,"scoredAt":123},55,"Medium","Plan remediation","2026-10-28T07:21:01.322488+00:00"]