CVE-2026-34486 1

Vulnerability (CVE)

CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Aug 04, 2026

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

Vulnerabilities & Patching