[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEW7nE5dAgNouMUlOgq1Hw61L55nlszW8swK5GMPLz6w":3,"g5a-risk:CVE-2026-34486":282},{"success":4,"data":5,"meta":279},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":26,"epssTimeSeries":36,"severity":38,"affectedProducts":39,"affectedProductsCount":89,"references":90,"referencesCount":165,"weaknesses":166,"weaknessesCount":182,"isActivelyExploited":4,"cisaInfo":183,"otxData":26,"relatedBlogPosts":185,"seoMetadata":186,"configurations":211,"relatedVendorCves":250,"notableEvents":251},"CVE-2026-34486","What is CVE-2026-34486?","Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.","Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This iss...","2026-04-09T20:16:25.063","2026-09-21T19:17:04.67",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":18,"CVSSData":31,"ExploitabilityScore":27,"ImpactScore":28},"0b0ca135-0b70-47e7-9f44-1890c2a1c46c",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.98503,[37,37,35,35,35,35,35],0.06561,"High",[40,45,48,51,56,60,63,66,70,73,77,80,83,86],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"apache","tomcat","9.0.116","cpe:2.3:a:apache:tomcat:9.0.116:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"10.1.53","cpe:2.3:a:apache:tomcat:10.1.53:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":49,"criteria":50,"vulnerable":4},"11.0.20","cpe:2.3:a:apache:tomcat:11.0.20:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"redhat","jboss_web_server","7.0.0","cpe:2.3:a:redhat:jboss_web_server:7.0.0:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":61,"criteria":62,"vulnerable":4},"9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",{"vendor":52,"product":57,"version":64,"criteria":65,"vulnerable":4},"10.0","cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*",{"vendor":52,"product":67,"version":68,"criteria":69,"vulnerable":4},"enterprise_linux_els","7.0","cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*",{"vendor":52,"product":71,"version":64,"criteria":72,"vulnerable":4},"enterprise_linux_eus","cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*",{"vendor":52,"product":74,"version":75,"criteria":76,"vulnerable":4},"enterprise_linux_tus","8.8","cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:*",{"vendor":52,"product":78,"version":75,"criteria":79,"vulnerable":4},"enterprise_linux_update_services_for_sap_solutions","cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*",{"vendor":52,"product":78,"version":81,"criteria":82,"vulnerable":4},"9.2","cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*",{"vendor":52,"product":78,"version":84,"criteria":85,"vulnerable":4},"9.4","cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:*",{"vendor":52,"product":78,"version":87,"criteria":88,"vulnerable":4},"9.6","cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:*",14,[91,97,102,106,110,113,116,119,122,125,128,131,134,137,140,143,146,149,153,156,160],{"url":92,"source":93,"tags":94},"https:\u002F\u002Flists.apache.org\u002Fthread\u002F9510k5p5zdvt9pkkgtyp85mvwxo2qrly","Apache",[95,96],"Mailing List","Vendor Advisory",{"url":98,"source":99,"tags":100},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2026-34486-detection-script-rce-on-apache-tomcat","Vicarius",[101],"Third Party Advisory",{"url":103,"source":99,"tags":104},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2026-34486-mitigation-script-rce-on-apache-tomcat",[105,101],"Mitigation",{"url":107,"source":108,"tags":109},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36787","Red Hat",[101],{"url":111,"source":108,"tags":112},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36788",[101],{"url":114,"source":108,"tags":115},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36789",[101],{"url":117,"source":108,"tags":118},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36790",[101],{"url":120,"source":108,"tags":121},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36876",[101],{"url":123,"source":108,"tags":124},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36877",[101],{"url":126,"source":108,"tags":127},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36878",[101],{"url":129,"source":108,"tags":130},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36879",[101],{"url":132,"source":108,"tags":133},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37136",[101],{"url":135,"source":108,"tags":136},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37137",[101],{"url":138,"source":108,"tags":139},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:38505",[101],{"url":141,"source":108,"tags":142},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39188",[101],{"url":144,"source":108,"tags":145},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39189",[101],{"url":147,"source":108,"tags":148},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34486",[101],{"url":150,"source":108,"tags":151},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2457027",[152,101],"Issue Tracking",{"url":154,"source":108,"tags":155},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34486.json",[101],{"url":157,"source":158,"tags":159},"https:\u002F\u002Fsocradar.io\u002Fblog\u002Fsnowlight-government-chinese-campaign\u002F","Socradar",[101],{"url":161,"source":162,"tags":163},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34486","CISA",[164],"US Government Resource",21,[167,175],{"id":168,"name":169,"description":170,"extendedDescription":171,"status":172,"abstraction":173,"structure":174},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.","Draft","Class","Simple",{"id":176,"name":177,"description":178,"extendedDescription":179,"status":180,"abstraction":181,"structure":174},"CWE-807","Reliance on Untrusted Inputs in a Security Decision","The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.","Developers may assume that inputs such as cookies, environment variables, and hidden form fields cannot be modified. However, an attacker could change these inputs using customized clients or other attacks. This change might not be detected. When security decisions such as authentication and authorization are made based on the values of these inputs, attackers can bypass the security of the software.\nWithout sufficient encryption, integrity checking, or other mechanism, any input that originates from an outsider cannot be trusted.","Incomplete","Base",2,{"shortDescription":184,"requiredAction":184,"vulnerabilityName":184,"dateAdded":26},"",[],{"title":187,"metaDescription":188,"keywords":189,"canonicalUrl":190,"structuredData":191},"What is CVE-2026-34486? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-34486, a high severity cyber security vulnerability from 2026. High exploit probability (98.5%). Missing Encryption of Sen...","CVE-2026-34486, CVE-2026-34486 vulnerability, CVE-2026-34486 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, apache security, redhat security, tomcat vulnerability, jboss_web_server vulnerability, enterprise_linux vulnerability, enterprise_linux_els vulnerability, enterprise_linux_eus vulnerability, high risk vulnerability","\u002Fwhat-is\u002Fcve-2026-34486",{"@context":192,"@type":193,"headline":187,"description":188,"datePublished":10,"dateModified":11,"author":194,"publisher":198,"about":202,"mainEntityOfPage":206,"articleSection":209,"keywords":210},"https:\u002F\u002Fschema.org","TechArticle",{"@type":195,"name":196,"url":197},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":195,"name":196,"url":197,"logo":199},{"@type":200,"url":201},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":203,"name":6,"description":204,"additionalType":205},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":207,"@id":208},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-34486","Cybersecurity","CVE-2026-34486, CVE-2026-34486 vulnerability, CVE-2026-34486 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[212,224],{"Operator":26,"Negate":26,"Nodes":213},[214],{"Operator":215,"Negate":216,"CPEMatch":217},"OR",false,[218,220,222],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CC160F23-A9D6-42DA-92E6-886B1B1F48A6",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0E7A0CE9-EBDF-4305-9C06-E7D4521AF422",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"64BAAE4D-2355-43D8-83E5-01CA71D5DC0B",{"Operator":26,"Negate":26,"Nodes":225},[226],{"Operator":215,"Negate":216,"CPEMatch":227},[228,230,232,234,236,238,240,242,244,246,248],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F764C52A-4533-4C39-A5A2-A5E1FE20960C",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":233,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":235,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0460F769-D90A-4446-AC00-24F66BDBF526",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"34990D09-125F-48CA-B85E-9D9F0EB4BC07",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"22D28543-C7C5-46B0-B909-20435AF7A501",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"01ED4F33-EBE7-4C04-8312-3DA580EFFB68",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1FD9BF0E-7ACF-4A83-B754-6E3979ED903F",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":247,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"18B7F648-9A31-4EE5-A215-C860616A4AB7",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"554AA8CA-A930-4788-B052-497E09D48381",[],[252,259,266,272],{"id":253,"eventType":254,"eventTime":255,"details":256,"label":257,"color":258},"ffa90696-937f-4628-8bc7-f82e9a41f784","NEW_NVD","2026-04-13T15:58:09.743899+00:00","New CVE added to NVD","Published to NVD","blue",{"id":260,"eventType":261,"eventTime":262,"details":263,"label":264,"color":265},"00d5c4f7-01e7-44eb-8545-4554cacabc67","HIGH_EPSS_DELTA","2026-06-24T04:04:40.446398+00:00","Daily EPSS score increased by 0.136 on 2026-05-05","EPSS Score Increased","red",{"id":267,"eventType":268,"eventTime":269,"details":270,"label":271,"color":265},"fe7a3068-9c6b-4c39-8176-da11746e034f","NEW_CISA","2026-08-05T04:01:10.499934+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV",{"id":273,"eventType":274,"eventTime":275,"details":276,"label":277,"color":278},"98a932a7-8580-4eef-837f-c82a3b98381d","LOW_EPSS_DELTA","2026-09-25T04:05:34.956091+00:00","Daily EPSS score decreased by 0.921 on 2026-05-05","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":280,"version":281},1793384861081,"2.0",{"score":283,"band":38,"action":284,"scoredAt":285},80,"Emergency patch","2026-10-30T07:14:41.580906+00:00"]