tag
Clustering
Critical
Apache Tomcat Tribes EncryptInterceptor Fail-Open Unauthenticated RCE (CVE-2026-34486)
CVE-2026-34486·
Apache Tomcat Tribes clustering (EncryptInterceptor)
patched
Medium
Apache Tomcat LoadBalancerDrainingValve — Cross-System Open Redirect / Session Fixation (CVE-2026-25854)
CVE-2026-25854·
Apache Tomcat (clustered, using LoadBalancerDrainingValve)
patched