cybercrime.clubhttps://cybercrime.club/tags/java-deserialization/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usFri, 07 Aug 2026 11:12:23 -0400CVE-2026-34486: Apache Tomcat's EncryptInterceptor Fix Was Incomplete — Now Under Active Exploitationhttps://cybercrime.club/posts/apache-tomcat-cve-2026-34486-encryptinterceptor-bypass-rce/Fri, 07 Aug 2026 11:12:23 -0400https://cybercrime.club/posts/apache-tomcat-cve-2026-34486-encryptinterceptor-bypass-rce/A second, incomplete patch for a Tomcat clustering flaw lets attackers bypass pre-shared-key encryption and reach Java deserialization on the cluster port — CISA gave federal agencies until today to fix it.vulnerabilities