CVE-2026-111244 | Apache TomEE up to 10.2.x/11.0.0-M1 access control

November 10, 2026 Yanac

A vulnerability described as critical has been identified in Apache TomEE up to 10.2.x/11.0.0-M1. The affected element is an unknown function. Such manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2026-111244. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More