CVE-2026-34486 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
May 28, 2026
Last Seen
July 2, 2026

CVE-2026-34486 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 4 intelligence report mentions.

CVE-2026-34486 is a vulnerability tracked across 2 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed May 28, 2026; most recent activity July 2, 2026.

Related Threat Clusters

  • Multiple Vulnerabilities in Apache Tomcat Expose Sensitive Data Risks

    Two critical vulnerabilities have been identified in Apache Tomcat, CVE-2026-34486 and CVE-2026-29146. CVE-2026-34486 allows bypassing of the EncryptInterceptor due to missing encryption of sensitive data, affecting…

    2 articles · Updated May 28, 2026
  • Multiple Vulnerabilities in Apache Tomcat Exposed

    Apache Tomcat has reported multiple vulnerabilities affecting versions 9.x, 10.x, and 11.x, including CVE-2026-55956, CVE-2026-55955, CVE-2026-55276, and CVE-2026-53434. These vulnerabilities could allow remote…

    4 articles · Updated July 2, 2026

Recent Intelligence Reports

  • Security 11 — tomcat.apache.org · July 2, 2026
  • Security 10 — tomcat.apache.org · July 2, 2026
  • Security 9 — tomcat.apache.org · July 2, 2026
  • CVE-2026-34486 — nvd.nist.gov · May 28, 2026

Related Entities

Brute Force CVE-2019-17569 CVE-2020-11996 CVE-2020-13934 CVE-2020-13935 CVE-2020-13943 CVE-2020-17527 CVE-2020-1935 CVE-2020-1938 CVE-2020-9484 CVE-2021-24122 CVE-2021-25122

Frequently asked questions

What is CVE-2026-34486?

CVE-2026-34486 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 4 intelligence report mentions.

Is CVE-2026-34486 still active?

The most recent intelligence report mentioning CVE-2026-34486 on ThreatCluster is dated July 2, 2026. Activity was first observed May 28, 2026, giving a tracked span from then to July 2, 2026.

What is CVE-2026-34486 associated with?

Across ThreatCluster reporting, CVE-2026-34486 most frequently co-occurs with Brute Force, CVE-2019-17569, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, among 12 tracked related entities.

What are the latest developments involving CVE-2026-34486?

The most significant recent cluster is “Multiple Vulnerabilities in Apache Tomcat Expose Sensitive Data Risks” (2 articles · Updated May 28, 2026). CVE-2026-34486 appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-34486?

CVE-2026-34486 appears in 4 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown