AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-34487

HIGH · CVSS 7.5 EPSS 0.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-04-09 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache, Kubernetes.

CVE
CVE-2026-34487
Severity
HIGH
CVSS
7.5
EPSS
0.45%
Apache Kubernetes

Original NVD Description

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)