CVE-2026-34486 — 脆弱性インテリジェンス

Apache — Tomcat

公表日: 2026-04-09T19:35:35.994Z

CVSS

7.5

CISA KEV

既知の悪用を確認

情報源の原文（翻訳ではありません）

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

情報源

• Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-34486