Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486)

2 karet z 2 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-34486

KEV ✓ EPSS 0.07 EPSS k 18. 10. 2026 náprava do 7. 8. 2026

Hodnocení závažnosti

7.5 CVSS 3.1 CISA-ADP · redhat-SADP

útok odkudkoli z internetu bez přípravy bez přihlášení bez zásahu uživatele

dopad plný únik dat beze změny dat bez výpadku

přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

4. 8. 2026

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9198 IBM Langflow Code Injection Vulnerability CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the…

KEV ✓ EPSS 0.29 CVE-2026-18556 CVE-2026-34486 CVE-2026-9198 IBM N-able Apache veřejná správa US

4. 8. 2026 · CISA Advisories · CISA Adds Three Known Exploited Vulnerabilities to Catalog

4. 8. 2026

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486)

CISA added CVE-2026-34486 to the Known Exploited Vulnerabilities catalog. Affected product: Apache Tomcat. Remediation due date: 2026-08-07.

KEV ✓ EPSS 0.07 CVE-2026-34486 Apache US

4. 8. 2026 · CISA KEV · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486)