PT-2026-141781

CVE-2026-86336

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions Apache TomEE versions prior to 10.3.0 Apache TomEE versions prior to 11.0.0-M2
Description When running on JDK 21 or later, the software skips EJB method authorization checks. This allows callers to invoke EJB methods without the configured access restrictions being enforced.
Recommendations Upgrade to version 10.3.0. Upgrade to version 11.0.0-M2.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2026-86336
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com