HIGHVulnerability
Verified
Global

CISA KEV: Apache Tomcat — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor.

Analysis

Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-04. Remediation due: 2026-08-07.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34486
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 4, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-18855 — The Link Library plugin for WordPress is vulnerable to arbitrary file deletion d...

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). E

CVE-2026-18855
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-19598 — The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to...

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce verification, login enforcement, and capability gate — through pods_error(), which under the JSON met

CVE-2026-19598
NIST NVD
MEDIUMVulnerability

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

[object Object]

CVE-2026-58231
r/cybersecurity