CVE-2026-111242 | Apache TomEE up to 10.0.0-M0/10.2.x/11.0.0-M1 MicroProfile JWT Authentication state issue

November 10, 2026 Yanac

A vulnerability labeled as critical has been found in Apache TomEE up to 10.0.0-M0/10.2.x/11.0.0-M1. This issue affects some unknown processing of the component MicroProfile JWT Authentication. The manipulation results in state issue.

This vulnerability is known as CVE-2026-111242. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More