pwn.watch: Java incident updates https://pwn.watch/s/java Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 12:59:41 GMT [high] Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability: CISA added CVE-2026-21962 to the KEV catalog (due 2026-08-27). https://pwn.watch/i/oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962 oracle-http-server-and-oracle-weblogic-server-proxy-plug-in-cve-2026-21962:2026-08-24:CISA added CVE-2026-21962 to the KEV catalog (due 2026-08-27). Mon, 24 Aug 2026 00:00:00 GMT high Status: closed, patched [high] Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability: CISA added CVE-2026-34486 to the KEV catalog (due 2026-08-07). https://pwn.watch/i/apache-tomcat-cve-2026-34486 apache-tomcat-cve-2026-34486:2026-08-04:CISA added CVE-2026-34486 to the KEV catalog (due 2026-08-07). Tue, 04 Aug 2026 00:00:00 GMT high Status: closed, patched [high] Apache ActiveMQ: Apache ActiveMQ Improper Input Validation Vulnerability: CISA added CVE-2026-34197 to the KEV catalog (due 2026-04-30). https://pwn.watch/i/apache-activemq-cve-2026-34197 apache-activemq-cve-2026-34197:2026-04-16:CISA added CVE-2026-34197 to the KEV catalog (due 2026-04-30). Thu, 16 Apr 2026 00:00:00 GMT high Status: closed, patched