https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 19:15:52 +0000 https://db.gcve.eu/vuln/cve-2026-97890 <p><strong>Affected:</strong> Apache Software Foundation Apache TomEE</p> <p>The embedded HTTP server does not invalidate the previous session identifier when an application changes the session id, e.g. after login. An attacker who can plant a session identifier in a victim&#39;s browser can hijack the victim&#39;s authenticated session. Users are recommended to block network access to the embedded HTTP server from untrusted clients, or to migrate to the Tomcat based TomEE distributions.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache TomEE</p> <p>The embedded HTTP server does not invalidate the previous session identifier when an application changes the session id, e.g. after login. An attacker who can plant a session identifier in a victim&#39;s browser can hijack the victim&#39;s authenticated session. Users are recommended to block network access to the embedded HTTP server from untrusted clients, or to migrate to the Tomcat based TomEE distributions.</p> https://db.gcve.eu/vuln/cve-2026-97890