{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T12:59:41.857Z",
  "stack": {
    "id": "java",
    "label": "Java",
    "kind": "language",
    "url": "https://pwn.watch/s/java",
    "feed": "https://pwn.watch/s/java/feed.xml"
  },
  "counts": {
    "incidents": 3,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 3
  },
  "incidents": [
    {
      "slug": "oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962",
      "title": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability",
      "url": "https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962",
      "json": "https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in",
      "stacks": [
        "java"
      ],
      "cveIds": [
        "CVE-2026-21962"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-08-24",
      "closedAt": "2026-08-24",
      "updatedAt": "2026-08-24",
      "summary": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data. Added to CISA KEV on 2026-08-24."
    },
    {
      "slug": "apache-tomcat-cve-2026-34486",
      "title": "Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability",
      "url": "https://pwn.watch/i/apache-tomcat-cve-2026-34486",
      "json": "https://pwn.watch/i/apache-tomcat-cve-2026-34486.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Apache Tomcat",
      "stacks": [
        "java"
      ],
      "cveIds": [
        "CVE-2026-34486"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-08-04",
      "closedAt": "2026-08-04",
      "updatedAt": "2026-08-04",
      "summary": "Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor. This vulnerability can be chained with CVE‑2025‑24813. Added to CISA KEV on 2026-08-04."
    },
    {
      "slug": "apache-activemq-cve-2026-34197",
      "title": "Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability",
      "url": "https://pwn.watch/i/apache-activemq-cve-2026-34197",
      "json": "https://pwn.watch/i/apache-activemq-cve-2026-34197.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Apache ActiveMQ",
      "stacks": [
        "java"
      ],
      "cveIds": [
        "CVE-2026-34197"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-04-16",
      "closedAt": "2026-04-16",
      "updatedAt": "2026-04-16",
      "summary": "Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. Added to CISA KEV on 2026-04-16."
    }
  ],
  "changes": [
    {
      "incident": "oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962",
      "incidentTitle": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-08-24",
      "title": "CISA added CVE-2026-21962 to the KEV catalog (due 2026-08-27).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962"
    },
    {
      "incident": "apache-tomcat-cve-2026-34486",
      "incidentTitle": "Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-08-04",
      "title": "CISA added CVE-2026-34486 to the KEV catalog (due 2026-08-07).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/apache-tomcat-cve-2026-34486"
    },
    {
      "incident": "apache-activemq-cve-2026-34197",
      "incidentTitle": "Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-04-16",
      "title": "CISA added CVE-2026-34197 to the KEV catalog (due 2026-04-30).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/apache-activemq-cve-2026-34197"
    }
  ]
}