CVE-2026-34486

Apache Tomcat Sensitive Session Data Exposure Flaw CVE-2026-34486 Added to CISA KEV

CISA flags Apache Tomcat vulnerability CVE-2026-34486 exploited in enterprise intrusions to intercept unencrypted session tokens and hijack authenticated user access.