CVE-2026-34486 — Vulnerability intelligence

Apache — Tomcat

Original source text (not a translation)

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

Sources

• Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-34486