Skip to content

CVE record · 1 source

CVE-2026-86336

Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access…

Vendor: Apache Software Foundation
Product: Apache TomEE
Weakness: CWE-862
Exposure class: Developer platform, Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

31

CVE NVD 2h ago

Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access…

Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access restrictions being enforced. Users are recommended to upgrade to version 10.3.0…

Fix available CVE-2026-86336 Apache Software Foundation