Vulnerabilities

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.

Read at CISA Known Exploited Vulnerabilities catalog

Vendor

Apache

Product

Tomcat

CISA KEV

listed

Exploitation

observed in the wild

Fix

available

Exposure class

Web platform

• CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
• CVE-2026-34486 on this site · NVD · CVE.org · Vulnpedia · KEV

Other items that share a CVE or were clustered with this one.

1. 16
   Research Insikt Group 8 Sep 2026

   August 2026 CVE Landscape

   CVE-2025-62593CVE-2026-72898CVE-2026-9198+57 more
2. 16
   Research Insikt Group 7 Aug 2026

   July 2026 CVE Landscape

   CVE-2025-3248CVE-2008-4128CVE-2017-17215+57 more
3. 53
   CISA advisory CISA 4 Aug 2026

   CISA Adds Three Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-9198CVE-2026-18556CVE-2026-34486 Apache Software Foundation N-able