Known Exploited Vulnerabilities August 04, 2026 · CISA KEV Catalog

CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Apache CVE-2026-34486
Related: CVE-2016-3081: Apache Struts Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 08, 2026
CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026
CVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerability Known Exploited Vulnerabilities · May 01, 2025