🔴 《严重安全漏洞：CVE-2026-59084》

CVSS 评分: 严重（9.1）　　状态: Analyzed　　发布时间: 2026-07-14

漏洞描述

Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected.

Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.

🔍 技术细节

字段 值
CVE ID CVE-2026-59084
CVSS 评分 9.1 🔴
严重程度 严重
CVSS 向量 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE 分类 CWE-1059
发布时间 2026-07-14
最后更新 2026-07-14
状态 Analyzed
数据来源 security@apache.org

🔗 参考链接