Exploit for CVE-2026-34486

kitploit · 2026-08-27

Description

Unauthenticated RCE in Apache Tomcat 9.0.0.M1-9.0.116 Tribes via Java deserialization on port 4000.

Affected Apache Tomcat versions

Apache Tomcat= 9.0.116, 10.1.53, 11.0.20

All known vulnerabilities by product

Apache Tomcat Rocky Linux

CVSS 7.5 for CVE-2026-34486

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

EPSS Score

98.6%higher than 99.9% of all CVEs

Updated 2026-09-02

CVE Information

Exploit Details

Modified:2026-08-27 01:12

Last Seen:2026-08-27 22:41

Reporter:KitPloit

Tags

Apache TomcatRCEJava DeserializationTribesUnauthenticatedEncryptInterceptor

Other exploits for CVE-2026-34486

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

2026-09-02 KitPloitKITPLOIT

cve-2026-34486-tomcat_encrypt_bypass_reproduction

2026-09-01 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

ASIS-CTF-Quals-2026

2026-08-30 hax1ngGITHUB

CVE-2026-34486-poc

2026-08-27 KitPloitKITPLOIT

tomcat-cve-2026-34486

2026-08-27 KitPloitKITPLOIT

Exploit for Reliance on Untrusted Inputs in a Security Decision in Apache Tomcat

2026-07-23 razureinkGITHUB

Exploit for Reliance on Untrusted Inputs in a Security Decision in Apache Tomcat

2026-07-08 elmossaidayoubGITHUB

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-404-SRC-CVE-2026-34486
# CVE-2026-34486 — Apache Tomcat EncryptInterceptor RCE

> O módulo de comunicação de cluster **Apache Tomcat** Tribes falha ao descartar mensagens quando a descriptografia do `EncryptInterceptor` falha, permitindo que atacantes não autenticados acionem **Execução Remota de Código** via desserialização Java na porta 4000.

![Apache Tomcat](https://img.shields.io/badge/Apache%20Tomcat-9.0.0.M1--9.0.116-red?logo=apachetomcat) ![CVE](https://img.shields.io/badge/CVE-2026--34486-critical?color=critical) ![CVSS](https://img.shields.io/badge/CVSS-7.5-orange) ![Python](https://img.shields.io/badge/Python-3.6+-blue?logo=python) ![Java](https://img.shields.io/badge/Java-11+-orange?logo=openjdk) ![Docker](https://img.shields.io/badge/Docker-ready-blue?logo=docker) ![License](https://img.shields.io/badge/License-MIT-green)

* * *

## Detalhes da Vulnerabilidade