CVE Listesine Dön
CVE-2026-34486 CISA KEV · Aktif SömürülüyorOtomatik saldırıya uygun · CISA

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

CVSS Skor

7.5

EPSS İhtimal

%6.6

Risk Skoru

1.0

Yayın

6 ay önce

İlgili Siber Güvenlik Haberleri (Newsroom)

Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:

TheCyberThrone06.08.2026

CISA Adds Four Vulnerabilities to KEV Catalog Aug 6 2026

Four Newly Added KEV Entries Reinforce the Growing Focus on Enterprise Management, AI, Middleware, and DevSecOps Platforms The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited…

Security.NL05.08.2026

Apache Tomcat-lek dat remote code execution mogelijk maakt actief misbruikt

Een beveiligingslek in Apache Tomcat dat remote code execution mogelijk maakt wordt actief misbruikt bij aanvallen, zo meldt ...

The Hacker News05.08.2026

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote

The Hacker News30.07.2026

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a recruiter call, or a familiar service behaving slightly wrong. Behind it: reused credentials, exposed systems, quiet loaders, abused trust, and exploit paths that should have been harder. Some defenses improved. The loose parts still got found first. Anyway,

Unit 4230.07.2026

Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks

Unit 42 details a Chinese speaking threat actor combining autonomous AI scanning across seven vulnerabilities with manual exploitation. Read more. The post Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks appeared first on Unit 42.

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-34486"