CVE-2026-111243 | Apache TomEE up to 10.2.x/11.0.0-M1 JWT Validation session expiration

November 10, 2026 Yanac

A vulnerability identified as critical has been detected in Apache TomEE up to 10.2.x/11.0.0-M1. This vulnerability affects unknown code of the component JWT Validation. The manipulation leads to session expiration.

This vulnerability is traded as CVE-2026-111243. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More