Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/6649?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6649?format=api", "vulnerability_id": "VCID-aug4-yyp5-37f8", "summary": "", "aliases": [ { "alias": "CVE-2026-34486" }, { "alias": "GHSA-69r9-qgr7-g2wj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4802?format=api", "purl": "pkg:apache/tomcat@9.0.117", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.117" }, { "url": "http://public2.vulnerablecode.io/api/packages/4644?format=api", "purl": "pkg:apache/tomcat@10.1.54", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.54" }, { "url": "http://public2.vulnerablecode.io/api/packages/4568?format=api", "purl": "pkg:apache/tomcat@11.0.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/210015?format=api", "purl": "pkg:deb/debian/tomcat10@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210007?format=api", "purl": "pkg:deb/debian/tomcat10@10.1.52-1~deb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-bqkn-zvm1-4kd6" }, { "vulnerability": "VCID-ek4k-3m72-qqbf" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-keyp-7fnn-cbh8" }, { "vulnerability": "VCID-rx6f-x5cc-6bef" }, { "vulnerability": "VCID-thj9-c3nq-f3ax" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210010?format=api", "purl": "pkg:deb/debian/tomcat10@10.1.52-1~deb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-bqkn-zvm1-4kd6" }, { "vulnerability": "VCID-ek4k-3m72-qqbf" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-keyp-7fnn-cbh8" }, { "vulnerability": "VCID-rx6f-x5cc-6bef" }, { "vulnerability": "VCID-thj9-c3nq-f3ax" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210009?format=api", "purl": "pkg:deb/debian/tomcat10@10.1.54-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.54-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210044?format=api", "purl": "pkg:deb/debian/tomcat11@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210042?format=api", "purl": "pkg:deb/debian/tomcat11@11.0.15-1~deb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-71uq-hgqp-b3a1" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-bqkn-zvm1-4kd6" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-ek4k-3m72-qqbf" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-keyp-7fnn-cbh8" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" }, { "vulnerability": "VCID-rx6f-x5cc-6bef" }, { "vulnerability": "VCID-thj9-c3nq-f3ax" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.15-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210039?format=api", "purl": "pkg:deb/debian/tomcat11@11.0.21-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.21-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210041?format=api", "purl": "pkg:deb/debian/tomcat11@11.0.22-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat11@11.0.22-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210057?format=api", "purl": "pkg:deb/debian/tomcat9@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210058?format=api", "purl": "pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.43-2~deb11u10%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210056?format=api", "purl": "pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.70-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210061?format=api", "purl": "pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.95-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210059?format=api", "purl": "pkg:deb/debian/tomcat9@9.0.115-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.115-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/210060?format=api", "purl": "pkg:deb/debian/tomcat9@9.0.118-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.118-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/4805?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.117", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117" }, { "url": "http://public2.vulnerablecode.io/api/packages/4647?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.1.54", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54" }, { "url": "http://public2.vulnerablecode.io/api/packages/4571?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@11.0.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4qzp-up1c-2kfq" }, { "vulnerability": "VCID-5j78-np3z-rfda" }, { "vulnerability": "VCID-9ptv-guzs-kyg1" }, { "vulnerability": "VCID-c8b5-23zz-cudd" }, { "vulnerability": "VCID-dk5d-3ebq-yfbn" }, { "vulnerability": "VCID-kxvn-6xbg-4fep" }, { "vulnerability": "VCID-pmx1-hkph-4qhd" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/188415?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.117" }, { "url": "http://public2.vulnerablecode.io/api/packages/188413?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.54", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.54" }, { "url": "http://public2.vulnerablecode.io/api/packages/188411?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@11.0.21", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-tribes@11.0.21" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4810?format=api", "purl": "pkg:apache/tomcat@9.0.116", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-aug4-yyp5-37f8" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.116" }, { "url": "http://public2.vulnerablecode.io/api/packages/4650?format=api", "purl": "pkg:apache/tomcat@10.1.53", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-aug4-yyp5-37f8" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.53" }, { "url": "http://public2.vulnerablecode.io/api/packages/4574?format=api", "purl": "pkg:apache/tomcat@11.0.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-aug4-yyp5-37f8" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4812?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.116", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-aug4-yyp5-37f8" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116" }, { "url": "http://public2.vulnerablecode.io/api/packages/4652?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.1.53", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-aug4-yyp5-37f8" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53" }, { "url": "http://public2.vulnerablecode.io/api/packages/4576?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@11.0.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1mms-9rqw-xqhq" }, { "vulnerability": "VCID-3e3b-6dse-s3gf" }, { "vulnerability": "VCID-aug4-yyp5-37f8" }, { "vulnerability": "VCID-jz35-ynpa-sqfq" }, { "vulnerability": "VCID-up1n-hunu-rkak" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/188414?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.116", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aug4-yyp5-37f8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.116" }, { "url": "http://public2.vulnerablecode.io/api/packages/188412?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.53", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aug4-yyp5-37f8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.53" }, { "url": "http://public2.vulnerablecode.io/api/packages/188410?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@11.0.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-aug4-yyp5-37f8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-tribes@11.0.20" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34486.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-34486.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-34486", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0168", "scoring_system": "epss", "scoring_elements": "0.82489", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-34486" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd" }, { "reference_url": "https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1" }, { "reference_url": "https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418" }, { "reference_url": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-10T20:20:09Z/" } ], "url": "https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34486" }, { "reference_url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.54", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.54" }, { "reference_url": "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.21", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.21" }, { "reference_url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.117", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.117" }, { "reference_url": "https://www.herodevs.com/vulnerability-directory/cve-2026-34486", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.herodevs.com/vulnerability-directory/cve-2026-34486" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457027", "reference_id": "2457027", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457027" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34486", "reference_id": "CVE-2026-34486", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34486" }, { "reference_url": "https://github.com/advisories/GHSA-69r9-qgr7-g2wj", "reference_id": "GHSA-69r9-qgr7-g2wj", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-69r9-qgr7-g2wj" } ], "weaknesses": [ { "cwe_id": 807, "name": "Reliance on Untrusted Inputs in a Security Decision", "description": "The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism." }, { "cwe_id": 311, "name": "Missing Encryption of Sensitive Data", "description": "The product does not encrypt sensitive or critical information before storage or transmission." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-aug4-yyp5-37f8" }