Apache Tomcat vulnerabilities

1 Apache Tomcat flaw was confirmed exploited in the wild in the past 365 days. Patch these first.

Added	Exploited vulnerability	Fix by
2026-08-04	CVE-2026-34486 Apache Tomcat Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.	2026-08-07

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.28 (live), refreshed every 12 hours.