CVE-2026-34486

exploited

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

open on the board →primary source ↗

signal timeline

CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerab…
CISA KEV · 9d ago

connections

CISA · co-mentioned

first seen 8d ago · last seen 4s ago

intelyard daily

One short email each weekday: what mattered in tech, written from source data and checked by a human. No account needed, one-click unsubscribe, and we never sell or share the address.