CVE-2026-34486

Vendor

Apache

Product

Tomcat

CISA KEV

listed

Exposure class

Web platform, Remote access, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 50
   KEV CISA KEV 4 Aug 2026

   Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

   Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

   KEV Fix available CVE-2026-34486 Apache
2. 53
   CISA advisory CISA 4 Aug 2026

   CISA Adds Three Known Exploited Vulnerabilities to Catalog

   CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-9198 IBM Langflow Code Injection Vulnerability CVE-2026-18556 N-able N-central…

   Exploited CVE-2026-9198CVE-2026-18556CVE-2026-34486 Apache Software Foundation N-able
3. 16
   Research Insikt Group 8 Sep 2026

   August 2026 CVE Landscape

   In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month.

   CVE-2025-62593CVE-2026-72898CVE-2026-9198+57 more
4. 16
   Research Insikt Group 7 Aug 2026

   July 2026 CVE Landscape

   In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.

   CVE-2025-3248CVE-2008-4128CVE-2017-17215+57 more