CVE-2026-111240 | Apache TomEE prior 10.3.0/11.0.0-M2 JDBC based JAAS login module improper authentication

A vulnerability was found in Apache TomEE. It has been classified as critical. Affected is an unknown function of the component JDBC based JAAS login module. This manipulation causes improper authentication.

This vulnerability is registered as CVE-2026-111240. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More