Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass

🗓️ 14 Jul 2026 16:08:37Reported by RedHatType

Tomcat EncryptInterceptor bypass leaves sensitive data unencrypted, risking disclosure after CVE-2026-29146 fix.

Reporter	Title	Published	Views	Family All 166
GithubExploit	Exploit for Missing Encryption of Sensitive Data in Apache Tomcat	15 Apr 202612:40	–	githubexploit
GithubExploit	Exploit for Missing Encryption of Sensitive Data in Apache Tomcat	15 Apr 202607:30	–	githubexploit
GithubExploit	Exploit for Reliance on Untrusted Inputs in a Security Decision in Apache Tomcat	8 Jul 202613:46	–	githubexploit
GithubExploit	Exploit for Missing Encryption of Sensitive Data in Apache Tomcat	11 May 202614:07	–	githubexploit
GithubExploit	Exploit for Missing Encryption of Sensitive Data in Apache Tomcat	15 Apr 202606:46	–	githubexploit
GithubExploit	Exploit for Missing Encryption of Sensitive Data in Apache Tomcat	16 Apr 202609:35	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl	17 Jun 202615:28	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 May 202616:03	–	ibm
ATTACKERKB	CVE-2026-34486	9 Apr 202619:35	–	attackerkb
Tenable Nessus	Alibaba Cloud Linux 3 : 0206: tomcat (ALINUX3-SA-2026:0206)	16 Jul 202600:00	–	nessus

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-34486
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34486
cve	www.cve.org/CVERecord

22 Jul 2026 14:45Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.21691

SSVC