Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Avi Lumelsky

Researcher fromOligo Security
#31855of 60,403
9.1Total CVSS
Vulnerabilities · 1
PT-2026-31700
2026-03-23
9.1
CVE-2026-29146
Apache
Apache Tomcat
A Padding Oracle flaw exists in the `EncryptInterceptor` when using its default configuration. This issue stems from the use of Cipher Block Chaining (CBC) and deficiencies in the error reporting mechanism. A remote attacker can exploit these weaknesses in the encryption padding to decrypt sensitive information and gain unauthorized access to confidential data.