{"data":{"id":"1126d860-434c-47e6-be69-ab1958e07ae4","title":"CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","summary":"Apache Tomcat has a vulnerability where the EncryptInterceptor (a security feature that encrypts sensitive data) can be bypassed, leaving data unprotected. This vulnerability is currently being actively exploited by attackers in the wild. Organizations must apply vendor-provided mitigations by August 7, 2026, following CISA's BOD 26-04 guidance on prioritizing security updates.","solution":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA's BOD 26-04 Prioritizing Security Updates Based on Risk guidance. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Consult the Apache Tomcat vendor advisory at https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly for specific patching details.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-34486","publishedAt":"2026-08-04T00:00:00.000Z","cveId":"CVE-2026-34486","cweIds":["CWE-311"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.42627,"patchAvailable":true,"disclosureDate":"2026-08-04T00:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.65,"researchCategory":null,"atlasIds":null}}