Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-35xg-a746-5qgc
Vulnerability ID VCID-35xg-a746-5qgc
Aliases CVE-2026-29129
GHSA-69cc-cv78-qc8g
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
CWE-15 External Control of System or Configuration Setting
System Score Found at
cvssv3 6.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-29129.json
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2026-29129
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2026-29129
epss 0.00021 https://api.first.org/data/v1/epss?cve=CVE-2026-29129
apache_tomcat Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29129
cvssv3.1 4.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-69cc-cv78-qc8g
cvssv3.1 7.5 https://github.com/apache/tomcat
generic_textual HIGH https://github.com/apache/tomcat
cvssv3.1 7.5 https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
generic_textual HIGH https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
ssvc Track https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2026-29129
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2026-29129
cvssv3.1 7.5 http://www.openwall.com/lists/oss-security/2026/04/09/22
generic_textual HIGH http://www.openwall.com/lists/oss-security/2026/04/09/22
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-29129.json
https://api.first.org/data/v1/epss?cve=CVE-2026-29129
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/5cfa876d73f1ff5f4dc8309c4320f684cbeff74e
https://github.com/apache/tomcat/commit/6db238562ec36ab1106db4d04843f8b33e7a0c06
https://github.com/apache/tomcat/commit/8d69b33764dba81dce89e3a768de6093a35620ae
https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
https://nvd.nist.gov/vuln/detail/CVE-2026-29129
http://www.openwall.com/lists/oss-security/2026/04/09/22
1133356 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133356
1133357 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1133357
2457031 https://bugzilla.redhat.com/show_bug.cgi?id=2457031
CVE-2026-29129 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29129
GHSA-69cc-cv78-qc8g https://github.com/advisories/GHSA-69cc-cv78-qc8g
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-29129.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/apache/tomcat
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T18:05:39Z/ Found at https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-29129
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at http://www.openwall.com/lists/oss-security/2026/04/09/22
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.05789
EPSS Score 0.00021
Published At April 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-10T00:03:26.186210+00:00 Apache Tomcat Importer Import https://tomcat.apache.org/security-11.html 38.1.0