CVE-2026-59084: Apache Tomcat EncryptInterceptor Misconfiguration Risk (CVSS 9.1)

**CVE-2026-59084 (Apache Tomcat EncryptInterceptor):** A critical (CVSS 9.1) vulnerability caused by insufficient documentation of EncryptInterceptor configuration that can leave Tomcat cluster replication traffic inadequately encrypted; an attacker on the cluster network could intercept, modify, or replay session replication data leading to session hijacking. The advisory lists affected versions, available patches, immediate remediation steps (update, review configuration, generate secure keys, and network isolation), and detection/post-remediation guidance.