CVE-2026-34486 - CVE Report

Description

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

9.8

CVSS CRITICAL

Details

Published

04 Aug 2026 00:00

Modified

N/A

Source

CIRCL

Vendor

Apache

Product

Tomcat

Fix Version

Vendor Patch / Mitigation Available

References

• nvd.nist.gov/vuln/detail/CVE-2026-34486
• cve.circl.lu/cve/CVE-2026-34486
• cve.mitre.org/cgi-bin/cvename.cgi
• vuldb.com/

CVE-2026-34486 CRITICAL

Description

Details

References