CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2026-34486

CWE-311

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

CVSS Score
7.5
High
EPSS — Exploit Probability
22%
Riskier than 97% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
NVD entry PoC / advisory

1 article across 1 outlet · first covered Apr 14, 2026 · latest Apr 14, 2026

Coverage timeline