From Data Loss Prevention (DLP) to Modern Data Security

November 12, 2025 · HKCERT · Severity: MEDIUM

Multiple vulnerabilities were identified in Apache Tomcat. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, sensitive information disclosure and data manipulation on the targeted system.   Note: CVE-2026-34486 is being exploited in the wild. If EncryptInterceptor... Impact Security Restriction Bypass Information Disclosure Data Manipulation System / Technologies affected Apache Tomcat version 9.0.13 to 9.0.116 Apache Tomcat version 10.1.0-M1 to 10.1.53 Apache Tomcat version 11.0.0-M1 to 11.0.20 Solutions Before installation of the software, please visit the vendor web-site for more details.