← Database

CVE-2026-34486

HIGH CVSS: 7.5 Published: 2026-04-09 Modified: 2026-08-10

Description

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

Affected Platforms

Redhat Enterprise Linux TusRedhat Enterprise LinuxRedhat Enterprise Linux EusRedhat Enterprise Linux Update Services For Sap SolutionsRedhat Enterprise Linux ElsApache TomcatRedhat Jboss Web Server

Weakness Type

CWE-311, CWE-807

References