Skip to content
SSRF Vulnerability in Java TLS Handshakes Discovered by Tenable

SSRF Vulnerability in Java TLS Handshakes Discovered by Tenable

First seen 22 Jan 2026, 02:59 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Tenable Research has identified a server-side request forgery (SSRF) vulnerability in Java's handling of client certificates during TLS handshakes. This vulnerability poses a risk of denial-of-service (DoS) attacks, potentially affecting applications that rely on Java for secure communications. Organizations using Java may need to assess their systems for this vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 225d ago How this analysis works

More articles in this cluster (1)