[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-34486":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":301,"aliases":302,"duplicate_of":9,"upstream":306,"downstream":307,"duplicates":355,"related":356,"reserved_at":9,"published_at":370,"modified_at":371,"state":372,"summary":373,"references_raw":384,"kevs":534,"epss":545,"epss_history":548,"metrics":823,"affected":835},"CVE-2026-34486","Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.\n\nThis issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.",null,[11,294],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","weakness","Draft","Class","High",[20,24,60,120,166,220,247,251,255,259,263,267,271,283],{"id":21,"name":22,"techniques":23},"CAPEC-157","Sniffing Attacks",[],{"id":25,"name":26,"techniques":27},"CAPEC-158","Sniffing Network Traffic",[28,44],{"id":29,"name":30,"tactics":31,"countermeasures":38},"T1040","Network Sniffing",[32,35],{"id":33,"name":34},"TA0031","Credential Access",{"id":36,"name":37},"TA0102","Discovery",[39],{"id":40,"name":41,"tactic":42},"D3-DNSTA","DNS Traffic Analysis",{"name":43},"Detect",{"id":45,"name":46,"tactics":47,"countermeasures":49},"T1111","Multi-Factor Authentication Interception",[48],{"id":33,"name":34},[50,55],{"id":51,"name":52,"tactic":53},"D3-HCI","Hardware Component Inventory",{"name":54},"Model",{"id":56,"name":57,"tactic":58},"D3-RH","Radiation Hardening",{"name":59},"Harden",{"id":61,"name":62,"techniques":63},"CAPEC-204","Lifting Sensitive Data Embedded in Cache",[64],{"id":65,"name":66,"tactics":67,"countermeasures":71},"T1005","Data from Local System",[68],{"id":69,"name":70},"TA0100","Collection",[72,77,82,87,91,95,99,104,108,112,116],{"id":73,"name":74,"tactic":75},"D3-RFAM","Remote File Access Mediation",{"name":76},"Isolate",{"id":78,"name":79,"tactic":80},"D3-DF","Decoy File",{"name":81},"Deceive",{"id":83,"name":84,"tactic":85},"D3-RF","Restore File",{"name":86},"Restore",{"id":88,"name":89,"tactic":90},"D3-CQ","Content Quarantine",{"name":76},{"id":92,"name":93,"tactic":94},"D3-FE","File Encryption",{"name":59},{"id":96,"name":97,"tactic":98},"D3-CM","Content Modification",{"name":76},{"id":100,"name":101,"tactic":102},"D3-FEV","File Eviction",{"name":103},"Evict",{"id":105,"name":106,"tactic":107},"D3-FA","File Analysis",{"name":43},{"id":109,"name":110,"tactic":111},"D3-CF","Content Filtering",{"name":76},{"id":113,"name":114,"tactic":115},"D3-FIM","File Integrity Monitoring",{"name":43},{"id":117,"name":118,"tactic":119},"D3-LFP","Local File Permissions",{"name":76},{"id":121,"name":122,"techniques":123},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[124],{"id":125,"name":126,"tactics":127,"countermeasures":129},"T1539","Steal Web Session Cookie",[128],{"id":33,"name":34},[130,134,138,142,146,150,154,158,162],{"id":131,"name":132,"tactic":133},"D3-CCSA","Credential Compromise Scope Analysis",{"name":43},{"id":135,"name":136,"tactic":137},"D3-RIC","Reissue Credential",{"name":86},{"id":139,"name":140,"tactic":141},"D3-CRO","Credential Rotation",{"name":59},{"id":143,"name":144,"tactic":145},"D3-ANCI","Authentication Cache Invalidation",{"name":103},{"id":147,"name":148,"tactic":149},"D3-CR","Credential Revocation",{"name":103},{"id":151,"name":152,"tactic":153},"D3-DUC","Decoy User Credential",{"name":81},{"id":155,"name":156,"tactic":157},"D3-CTS","Credential Transmission Scoping",{"name":76},{"id":159,"name":160,"tactic":161},"D3-CH","Credential Hardening",{"name":59},{"id":163,"name":164,"tactic":165},"D3-MFA","Multi-factor Authentication",{"name":59},{"id":167,"name":168,"techniques":169},"CAPEC-37","Retrieve Embedded Sensitive Data",[170,196],{"id":65,"name":66,"tactics":171,"countermeasures":173},[172],{"id":69,"name":70},[174,176,178,180,182,184,186,188,190,192,194],{"id":73,"name":74,"tactic":175},{"name":76},{"id":78,"name":79,"tactic":177},{"name":81},{"id":83,"name":84,"tactic":179},{"name":86},{"id":88,"name":89,"tactic":181},{"name":76},{"id":92,"name":93,"tactic":183},{"name":59},{"id":96,"name":97,"tactic":185},{"name":76},{"id":100,"name":101,"tactic":187},{"name":103},{"id":105,"name":106,"tactic":189},{"name":43},{"id":109,"name":110,"tactic":191},{"name":76},{"id":113,"name":114,"tactic":193},{"name":43},{"id":117,"name":118,"tactic":195},{"name":76},{"id":197,"name":198,"tactics":199,"countermeasures":201},"T1552.004","Private Keys",[200],{"id":33,"name":34},[202,204,206,208,210,212,214,216,218],{"id":155,"name":156,"tactic":203},{"name":76},{"id":159,"name":160,"tactic":205},{"name":59},{"id":135,"name":136,"tactic":207},{"name":86},{"id":151,"name":152,"tactic":209},{"name":81},{"id":147,"name":148,"tactic":211},{"name":103},{"id":131,"name":132,"tactic":213},{"name":43},{"id":163,"name":164,"tactic":215},{"name":59},{"id":139,"name":140,"tactic":217},{"name":59},{"id":143,"name":144,"tactic":219},{"name":103},{"id":221,"name":222,"techniques":223},"CAPEC-383","Harvesting Information via API Event Monitoring",[224],{"id":225,"name":226,"tactics":227,"countermeasures":230},"T1056.004","Credential API Hooking",[228,229],{"id":69,"name":70},{"id":33,"name":34},[231,235,239,243],{"id":232,"name":233,"tactic":234},"D3-MBT","Memory Boundary Tracking",{"name":43},{"id":236,"name":237,"tactic":238},"D3-PCSV","Process Code Segment Verification",{"name":43},{"id":240,"name":241,"tactic":242},"D3-PSEP","Process Segment Execution Prevention",{"name":59},{"id":244,"name":245,"tactic":246},"D3-SAOR","Segment Address Offset Randomization",{"name":59},{"id":248,"name":249,"techniques":250},"CAPEC-384","Application API Message Manipulation via Man-in-the-Middle",[],{"id":252,"name":253,"techniques":254},"CAPEC-385","Transaction or Event Tampering via Application API Manipulation",[],{"id":256,"name":257,"techniques":258},"CAPEC-386","Application API Navigation Remapping",[],{"id":260,"name":261,"techniques":262},"CAPEC-387","Navigation Remapping To Propagate Malicious Content",[],{"id":264,"name":265,"techniques":266},"CAPEC-388","Application API Button Hijacking",[],{"id":268,"name":269,"techniques":270},"CAPEC-477","Signature Spoofing by Mixing Signed and Unsigned Content",[],{"id":272,"name":273,"techniques":274},"CAPEC-609","Cellular Traffic Intercept",[275],{"id":45,"name":46,"tactics":276,"countermeasures":278},[277],{"id":33,"name":34},[279,281],{"id":51,"name":52,"tactic":280},{"name":54},{"id":56,"name":57,"tactic":282},{"name":59},{"id":284,"name":285,"techniques":286},"CAPEC-65","Sniff Application Code",[287],{"id":29,"name":30,"tactics":288,"countermeasures":291},[289,290],{"id":33,"name":34},{"id":36,"name":37},[292],{"id":40,"name":41,"tactic":293},{"name":43},{"_key":295,"id":295,"name":296,"description":297,"type":15,"status":298,"abstraction":299,"likelihood_of_exploit":18,"capec":300},"CWE-807","Reliance on Untrusted Inputs in a Security Decision","The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.","Incomplete","Base",[],[],[303,304,305],"GHSA-69r9-qgr7-g2wj","BIT-tomcat-2026-34486","UBUNTU-CVE-2026-34486",[],[308,310,312,314,316,318,320,322,324,326,328,330,331,333,335,337,339,341,343,345,347,349,351,353],{"_key":309},"OPENSUSE-SU-2026:10547-1",{"_key":311},"OPENSUSE-SU-2026:10548-1",{"_key":313},"OPENSUSE-SU-2026:10549-1",{"_key":315},"MGASA-2026-0095",{"_key":317},"OPENSUSE-SU-2026:20595-1",{"_key":319},"SUSE-SU-2026:1572-1",{"_key":321},"SUSE-SU-2026:1558-1",{"_key":323},"OPENSUSE-SU-2026:20611-1",{"_key":325},"OPENSUSE-SU-2026:20612-1",{"_key":327},"SUSE-SU-2026:1604-1",{"_key":329},"SUSE-SU-2026:1603-1",{"_key":305},{"_key":332},"RHSA-2026:36787",{"_key":334},"RHSA-2026:36788",{"_key":336},"RHSA-2026:36789",{"_key":338},"RHSA-2026:36790",{"_key":340},"RHSA-2026:36876",{"_key":342},"RHSA-2026:36877",{"_key":344},"RHSA-2026:36878",{"_key":346},"RHSA-2026:36879",{"_key":348},"RHSA-2026:37136",{"_key":350},"RHSA-2026:37137",{"_key":352},"RHSA-2026:38505",{"_key":354},"RHSA-2026:39188",[],[357,358,359,360,361,362,363,364,365,366,367,368],{"_key":309},{"_key":311},{"_key":313},{"_key":315},{"_key":317},{"_key":319},{"_key":321},{"_key":323},{"_key":325},{"_key":327},{"_key":329},{"_key":369},"CGA-H965-C2P6-V66R","2026-04-09T19:35:35.994Z","2026-08-10T12:05:44.488Z","Analyzed",{"cisa_kev":374,"cisa_ransomware":375,"cisa_vendor":376,"epss_severity":377,"epss_score":378,"severity":379,"severity_score":380,"severity_version":381,"severity_source":382,"severity_vector":383,"severity_status":372},true,false,"Apache","critical",0.82933,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[385,396,401,406,410,414,418,422,426,430,434,439,444,450,455,460,464,468,472,476,480,484,488,492,496,500,504,508,512,516,522,526,530],{"url":386,"sources":387,"tags":391},"https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly",[382,388,389,390],"nvd","osv_maven","osv_ubuntu",[392,393,394,395],"Vendor Advisory","WEB","Mailing List","REPORT",{"url":397,"sources":398,"tags":399},"https://nvd.nist.gov/vuln/detail/CVE-2026-34486",[389],[400],"Advisory",{"url":402,"sources":403,"tags":404},"https://github.com/apache/tomcat",[389],[405],"PACKAGE",{"url":407,"sources":408,"tags":409},"https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd",[389],[393],{"url":411,"sources":412,"tags":413},"https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1",[389],[393],{"url":415,"sources":416,"tags":417},"https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418",[389],[393],{"url":419,"sources":420,"tags":421},"https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.54",[389],[393],{"url":423,"sources":424,"tags":425},"https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.21",[389],[393],{"url":427,"sources":428,"tags":429},"https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.117",[389],[393],{"url":431,"sources":432,"tags":433},"https://www.herodevs.com/vulnerability-directory/cve-2026-34486",[389],[393],{"url":435,"sources":436,"tags":437},"https://www.vicarius.io/vsociety/posts/cve-2026-34486-detection-script-rce-on-apache-tomcat",[382,388,389],[393,438],"Third Party Advisory",{"url":440,"sources":441,"tags":442},"https://www.vicarius.io/vsociety/posts/cve-2026-34486-mitigation-script-rce-on-apache-tomcat",[382,388,389],[393,443,438],"Mitigation",{"url":445,"sources":446,"tags":447},"https://access.redhat.com/security/cve/CVE-2026-34486",[382,388],[448,449,438],"VDB Entry","X Refsource REDHAT",{"url":451,"sources":452,"tags":453},"https://bugzilla.redhat.com/show_bug.cgi?id=2457027",[382,388],[454,449,438],"Issue Tracking",{"url":456,"sources":457,"tags":458},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34486.json",[382,388],[459,438],"X Sadp Csaf Vex",{"url":461,"sources":462,"tags":463},"https://access.redhat.com/errata/RHSA-2026:36787",[382,388],[392,449,438],{"url":465,"sources":466,"tags":467},"https://access.redhat.com/errata/RHSA-2026:36789",[382,388],[392,449,438],{"url":469,"sources":470,"tags":471},"https://access.redhat.com/errata/RHSA-2026:36788",[382,388],[392,449,438],{"url":473,"sources":474,"tags":475},"https://access.redhat.com/errata/RHSA-2026:36790",[382,388],[392,449,438],{"url":477,"sources":478,"tags":479},"https://access.redhat.com/errata/RHSA-2026:37137",[382,388],[392,449,438],{"url":481,"sources":482,"tags":483},"https://access.redhat.com/errata/RHSA-2026:37136",[382,388],[392,449,438],{"url":485,"sources":486,"tags":487},"https://access.redhat.com/errata/RHSA-2026:36878",[382,388],[392,449,438],{"url":489,"sources":490,"tags":491},"https://access.redhat.com/errata/RHSA-2026:36876",[382,388],[392,449,438],{"url":493,"sources":494,"tags":495},"https://access.redhat.com/errata/RHSA-2026:36877",[382,388],[392,449,438],{"url":497,"sources":498,"tags":499},"https://access.redhat.com/errata/RHSA-2026:36879",[382,388],[392,449,438],{"url":501,"sources":502,"tags":503},"https://access.redhat.com/errata/RHSA-2026:38505",[382,388],[392,449,438],{"url":505,"sources":506,"tags":507},"https://access.redhat.com/errata/RHSA-2026:39188",[382,388],[392,449,438],{"url":509,"sources":510,"tags":511},"https://access.redhat.com/errata/RHSA-2026:39189",[382,388],[392,449,438],{"url":513,"sources":514,"tags":515},"https://socradar.io/blog/snowlight-government-chinese-campaign/",[382,388],[438],{"url":517,"sources":518,"tags":519},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34486",[382,388],[520,521],"Government Resource","US Government Resource",{"url":523,"sources":524,"tags":525},"https://ubuntu.com/security/CVE-2026-34486",[390],[395],{"url":527,"sources":528,"tags":529},"https://www.cve.org/CVERecord?id=CVE-2026-34486",[390],[395],{"url":531,"sources":532,"tags":533},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog",[390],[395],[535],{"source":536,"vendor":376,"product":537,"date_added":538,"vulnerability_name":539,"short_description":540,"required_action":541,"due_date":542,"known_ransomware_campaign_use":543,"notes":544,"exploitation_type":9},"cisa","Tomcat","2026-08-04","Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-08-07","Unknown","https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34486",{"date":546,"score":378,"percentile":547},"2026-08-22",0.99648,[549,553,557,560,563,566,570,573,576,579,582,585,589,592,595,598,601,604,606,609,611,613,616,619,622,624,626,629,631,633,635,638,642,645,648,651,655,658,661,664,667,670,673,677,680,683,685,688,692,695,698,701,704,707,710,714,717,721,724,728,731,734,737,740,743,746,749,753,756,759,762,765,768,771,774,778,781,784,787,790,793,796,800,803,806,809,812,814,817,820],{"date":550,"score":551,"percentile":552},"2026-04-10",0.00008,0.00647,{"date":554,"score":555,"percentile":556},"2026-04-11",0.00012,0.01804,{"date":558,"score":555,"percentile":559},"2026-04-12",0.01794,{"date":561,"score":555,"percentile":562},"2026-04-13",0.01791,{"date":564,"score":555,"percentile":565},"2026-04-14",0.01775,{"date":567,"score":568,"percentile":569},"2026-04-15",0.0002,0.05191,{"date":571,"score":568,"percentile":572},"2026-04-16",0.05206,{"date":574,"score":568,"percentile":575},"2026-04-17",0.05215,{"date":577,"score":568,"percentile":578},"2026-04-18",0.05208,{"date":580,"score":568,"percentile":581},"2026-04-19",0.05195,{"date":583,"score":568,"percentile":584},"2026-04-20",0.0519,{"date":586,"score":587,"percentile":588},"2026-04-21",0.00009,0.00975,{"date":590,"score":587,"percentile":591},"2026-04-22",0.00978,{"date":593,"score":587,"percentile":594},"2026-04-23",0.00982,{"date":596,"score":587,"percentile":597},"2026-04-24",0.00977,{"date":599,"score":587,"percentile":600},"2026-04-25",0.00974,{"date":602,"score":587,"percentile":603},"2026-04-26",0.00981,{"date":605,"score":587,"percentile":591},"2026-04-27",{"date":607,"score":587,"percentile":608},"2026-04-28",0.00972,{"date":610,"score":587,"percentile":600},"2026-04-29",{"date":612,"score":587,"percentile":588},"2026-04-30",{"date":614,"score":587,"percentile":615},"2026-05-01",0.00971,{"date":617,"score":587,"percentile":618},"2026-05-02",0.00976,{"date":620,"score":587,"percentile":621},"2026-05-03",0.00973,{"date":623,"score":587,"percentile":608},"2026-05-04",{"date":625,"score":587,"percentile":600},"2026-05-05",{"date":627,"score":587,"percentile":628},"2026-05-06",0.0097,{"date":630,"score":587,"percentile":608},"2026-05-07",{"date":632,"score":587,"percentile":618},"2026-05-08",{"date":634,"score":587,"percentile":608},"2026-05-09",{"date":636,"score":587,"percentile":637},"2026-05-10",0.00969,{"date":639,"score":640,"percentile":641},"2026-05-11",0.0001,0.01203,{"date":643,"score":640,"percentile":644},"2026-05-12",0.012,{"date":646,"score":640,"percentile":647},"2026-05-13",0.01206,{"date":649,"score":640,"percentile":650},"2026-05-14",0.01211,{"date":652,"score":653,"percentile":654},"2026-05-15",0.01218,0.79229,{"date":656,"score":653,"percentile":657},"2026-05-16",0.79235,{"date":659,"score":653,"percentile":660},"2026-05-17",0.79243,{"date":662,"score":653,"percentile":663},"2026-05-18",0.79242,{"date":665,"score":653,"percentile":666},"2026-05-19",0.79248,{"date":668,"score":653,"percentile":669},"2026-05-20",0.79249,{"date":671,"score":653,"percentile":672},"2026-05-21",0.79258,{"date":674,"score":675,"percentile":676},"2026-05-22",0.01646,0.82208,{"date":678,"score":675,"percentile":679},"2026-05-23",0.8221,{"date":681,"score":675,"percentile":682},"2026-05-24",0.82214,{"date":684,"score":675,"percentile":682},"2026-05-25",{"date":686,"score":675,"percentile":687},"2026-05-26",0.82209,{"date":689,"score":690,"percentile":691},"2026-05-27",0.0168,0.82426,{"date":693,"score":690,"percentile":694},"2026-05-28",0.82461,{"date":696,"score":690,"percentile":697},"2026-05-29",0.82482,{"date":699,"score":690,"percentile":700},"2026-05-30",0.82489,{"date":702,"score":690,"percentile":703},"2026-05-31",0.82486,{"date":705,"score":690,"percentile":706},"2026-06-01",0.82492,{"date":708,"score":690,"percentile":709},"2026-06-02",0.82505,{"date":711,"score":712,"percentile":713},"2026-06-03",0.02218,0.84781,{"date":715,"score":712,"percentile":716},"2026-06-04",0.84788,{"date":718,"score":719,"percentile":720},"2026-06-05",0.01889,0.83553,{"date":722,"score":719,"percentile":723},"2026-06-06",0.83555,{"date":725,"score":726,"percentile":727},"2026-06-07",0.01399,0.8078,{"date":729,"score":726,"percentile":730},"2026-06-08",0.80777,{"date":732,"score":726,"percentile":733},"2026-06-09",0.80797,{"date":735,"score":726,"percentile":736},"2026-06-10",0.80822,{"date":738,"score":726,"percentile":739},"2026-06-11",0.80834,{"date":741,"score":726,"percentile":742},"2026-06-12",0.80894,{"date":744,"score":726,"percentile":745},"2026-06-13",0.80905,{"date":747,"score":726,"percentile":748},"2026-06-14",0.80896,{"date":750,"score":751,"percentile":752},"2026-06-15",0.01895,0.76854,{"date":754,"score":751,"percentile":755},"2026-06-16",0.76879,{"date":757,"score":751,"percentile":758},"2026-06-17",0.76914,{"date":760,"score":751,"percentile":761},"2026-06-18",0.76936,{"date":763,"score":751,"percentile":764},"2026-06-19",0.76932,{"date":766,"score":751,"percentile":767},"2026-06-20",0.76931,{"date":769,"score":751,"percentile":770},"2026-06-21",0.76926,{"date":772,"score":751,"percentile":773},"2026-06-22",0.76924,{"date":775,"score":776,"percentile":777},"2026-06-23",0.15447,0.96367,{"date":779,"score":776,"percentile":780},"2026-06-24",0.96371,{"date":782,"score":776,"percentile":783},"2026-06-25",0.96377,{"date":785,"score":776,"percentile":786},"2026-06-26",0.9638,{"date":788,"score":776,"percentile":789},"2026-06-27",0.96384,{"date":791,"score":776,"percentile":792},"2026-06-28",0.96381,{"date":794,"score":776,"percentile":795},"2026-06-29",0.96382,{"date":797,"score":798,"percentile":799},"2026-06-30",0.15831,0.96469,{"date":801,"score":798,"percentile":802},"2026-07-01",0.96475,{"date":804,"score":798,"percentile":805},"2026-07-02",0.96478,{"date":807,"score":798,"percentile":808},"2026-07-03",0.96479,{"date":810,"score":798,"percentile":811},"2026-07-04",0.96481,{"date":813,"score":798,"percentile":811},"2026-07-05",{"date":815,"score":798,"percentile":816},"2026-07-06",0.96482,{"date":818,"score":798,"percentile":819},"2026-07-07",0.96483,{"date":821,"score":798,"percentile":822},"2026-07-08",0.96485,[824,829,831,833],{"source":382,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":825,"cvss_v4_0":9},{"baseScore":380,"baseSeverity":826,"vectorString":383,"impactScore":827,"exploitabilityScore":828},"HIGH",6,10,{"source":388,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":830,"cvss_v4_0":9},{"baseScore":380,"baseSeverity":826,"vectorString":383,"impactScore":827,"exploitabilityScore":828},{"source":389,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":832,"cvss_v4_0":9},{"baseScore":380,"baseSeverity":9,"vectorString":383,"impactScore":827,"exploitabilityScore":828},{"source":390,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":834,"cvss_v4_0":9},{"baseScore":380,"baseSeverity":9,"vectorString":383,"impactScore":827,"exploitabilityScore":828},[836,849,857,866,882,889,896,904,916,922,927,933,944],{"ecosystem":9,"name":837,"vendor":838,"product":839,"cpe_part":840,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":841},"Apache Tomcat","apache software foundation","apache tomcat","a",[842,845,847],{"version":843,"is_range":375,"range_type":382,"version_start":843,"version_start_type":844,"version_end":843,"version_end_type":844,"fixed_in":9},"11.0.20","including",{"version":846,"is_range":375,"range_type":382,"version_start":846,"version_start_type":844,"version_end":846,"version_end_type":844,"fixed_in":9},"10.1.53",{"version":848,"is_range":375,"range_type":382,"version_start":848,"version_start_type":844,"version_end":848,"version_end_type":844,"fixed_in":9},"9.0.116",{"ecosystem":9,"name":537,"vendor":850,"product":851,"cpe_part":840,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":852},"apache","tomcat",[853,855,856],{"version":848,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"cpe",{"version":846,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":843,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":858,"name":859,"vendor":860,"product":859,"cpe_part":9,"purl_type":861,"purl_namespace":860,"purl_name":859,"source":9,"versions":862},"Ubuntu","tomcat8","ubuntu","deb",[863],{"version":864,"is_range":374,"range_type":865,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all","ecosystem",{"ecosystem":867,"name":868,"vendor":869,"product":851,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":851,"source":9,"versions":871},"Maven","org.apache.tomcat:tomcat","org.apache.tomcat","maven",[872,876,879],{"version":873,"is_range":374,"range_type":865,"version_start":843,"version_start_type":844,"version_end":874,"version_end_type":875,"fixed_in":9},"gte11_0_20_lt11_0_21","11.0.21","excluding",{"version":877,"is_range":374,"range_type":865,"version_start":846,"version_start_type":844,"version_end":878,"version_end_type":875,"fixed_in":9},"gte10_1_53_lt10_1_54","10.1.54",{"version":880,"is_range":374,"range_type":865,"version_start":848,"version_start_type":844,"version_end":881,"version_end_type":875,"fixed_in":9},"gte9_0_116_lt9_0_117","9.0.117",{"ecosystem":867,"name":883,"vendor":869,"product":884,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":884,"source":9,"versions":885},"org.apache.tomcat:tomcat-catalina","tomcat-catalina",[886,887,888],{"version":873,"is_range":374,"range_type":865,"version_start":843,"version_start_type":844,"version_end":874,"version_end_type":875,"fixed_in":9},{"version":877,"is_range":374,"range_type":865,"version_start":846,"version_start_type":844,"version_end":878,"version_end_type":875,"fixed_in":9},{"version":880,"is_range":374,"range_type":865,"version_start":848,"version_start_type":844,"version_end":881,"version_end_type":875,"fixed_in":9},{"ecosystem":867,"name":890,"vendor":869,"product":891,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":891,"source":9,"versions":892},"org.apache.tomcat:tomcat-tribes","tomcat-tribes",[893,894,895],{"version":873,"is_range":374,"range_type":865,"version_start":843,"version_start_type":844,"version_end":874,"version_end_type":875,"fixed_in":9},{"version":877,"is_range":374,"range_type":865,"version_start":846,"version_start_type":844,"version_end":878,"version_end_type":875,"fixed_in":9},{"version":880,"is_range":374,"range_type":865,"version_start":848,"version_start_type":844,"version_end":881,"version_end_type":875,"fixed_in":9},{"ecosystem":867,"name":897,"vendor":898,"product":899,"cpe_part":9,"purl_type":870,"purl_namespace":898,"purl_name":899,"source":9,"versions":900},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[901,902,903],{"version":873,"is_range":374,"range_type":865,"version_start":843,"version_start_type":844,"version_end":874,"version_end_type":875,"fixed_in":9},{"version":877,"is_range":374,"range_type":865,"version_start":846,"version_start_type":844,"version_end":878,"version_end_type":875,"fixed_in":9},{"version":880,"is_range":374,"range_type":865,"version_start":848,"version_start_type":844,"version_end":881,"version_end_type":875,"fixed_in":9},{"ecosystem":9,"name":905,"vendor":906,"product":907,"cpe_part":908,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":909},"enterprise linux","redhat","enterprise_linux","o",[910,912,914],{"version":911,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"version":913,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0",{"version":915,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0",{"ecosystem":9,"name":917,"vendor":906,"product":918,"cpe_part":908,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":919},"enterprise linux els","enterprise_linux_els",[920],{"version":921,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"ecosystem":9,"name":923,"vendor":906,"product":924,"cpe_part":908,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":925},"enterprise linux eus","enterprise_linux_eus",[926],{"version":915,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":928,"vendor":906,"product":929,"cpe_part":908,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":930},"enterprise linux tus","enterprise_linux_tus",[931],{"version":932,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.8",{"ecosystem":9,"name":934,"vendor":906,"product":935,"cpe_part":908,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":936},"enterprise linux update services for sap solutions","enterprise_linux_update_services_for_sap_solutions",[937,938,940,942],{"version":932,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":939,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.2",{"version":941,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.4",{"version":943,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.6",{"ecosystem":9,"name":945,"vendor":906,"product":946,"cpe_part":840,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":947},"jboss web server","jboss_web_server",[948],{"version":949,"is_range":375,"range_type":854,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.0"]