Tomcat — PoC Archivehttps://poc.intelseclab.com/tags/tomcat/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Apache Tomcat Tribes EncryptInterceptor Fail-Open Unauthenticated RCE (CVE-2026-34486)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34486-tomcat-tribes-deserialization-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34486-tomcat-tribes-deserialization-rce/Critical severity — web · CVE-2026-34486. Status: Weaponized. Affects: Apache Tomcat Tribes clustering (EncryptInterceptor). Tags: deserialization, rce, tomcat, tribes, clustering, java, gadget-chain, unauthenticated.webCriticaldeserializationrcetomcattribesclusteringjavagadget-chainunauthenticatedApache Tomcat Mutual TLS OCSP Soft-Fail Authentication Bypass — CVE-2026-29145https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-29145. Status: PoC. Affects: Apache Tomcat (CLIENT_CERT / Mutual TLS authentication). Tags: tomcat, mtls, client-cert, ocsp, auth-bypass, revocation-check, docker-lab, java.webCriticaltomcatmtlsclient-certocspauth-bypassrevocation-checkdocker-labjava