CVE-2026-41710

🗓️ 09 Jun 2026 03:48:15Reported by vmwareType

CVE-2026-41710 exhausts the stateful retry cache with many unique requests, causing denial of service.

Reporter	Title	Published	Views	Family All 10
CNNVD	VMware Spring Retry 安全漏洞	9 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-41710 Cache Exhaustion in Stateful Retries leads to Denial of Service	9 Jun 202603:48	–	cvelist
EUVD	EUVD-2026-35321	9 Jun 202603:48	–	euvd
F5 Networks	K000161900: Spring Retry vulnerability CVE-2026-41710	25 Jun 202609:14	–	f5
NVD	CVE-2026-41710	9 Jun 202605:16	–	nvd
Positive Technologies	PT-2026-47646	9 Jun 202600:00	–	ptsecurity
Snyk	Allocation of Resources Without Limits or Throttling	8 Jun 202600:00	–	snyk
Spring Security Advisories	CVE-2026-41710: Cache Exhaustion in Stateful Retries leads to Denial of Service	8 Jun 202600:00	–	spring
vulnersOsv	ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +2562 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=2.0.0 <=2.0.12)	8 Jun 202600:00	–	vulnersosv
Vulnrichment	CVE-2026-41710 Cache Exhaustion in Stateful Retries leads to Denial of Service	9 Jun 202603:48	–	vulnrichment

[
  {
    "vendor": "Spring",
    "product": "Spring Retry",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThan": "2.0.12.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.3.0",
        "lessThan": "1.3.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
spring	www.spring.io/security/cve-2026-41710

23 Jun 2026 21:16Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.9

EPSS0.0028

SSVC

CWE-770