7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
CVE-2026-34486 — Apache Tomcat EncryptInterceptor RCE Apache Tomcat Tribes cluster communication module fails to discard messages when EncryptInterceptor decryption fails, allowing unauthenticated attackers to trigger Remote Code Execution via Java...
Basic Information
ID
05869CA7-92ED-5040-BB39-AE26A84D0EBA
Published
Apr 15, 2026 at 12:40
Modified
Apr 15, 2026 at 12:43