CVE-2026-47891

🗓️ 27 Aug 2026 05:21:39Reported by vmwareType

Spring Framework 5.2.25-7.0.8 WebFlux Aalto XML parser does not enforce maxInMemorySize limit.

Reporter	Title	Published	Views	Family All 107
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in spring-web	22 Oct 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Spring WebFlux, IBM Sterling Control Center is vulnerable to multiple CVEs (CVE-2026-47883, CVE-2026-47885, CVE-2026-47889, CVE-2026-47891 )	5 Oct 202619:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Multiple Spring Framework Vulnerabilities.	22 Oct 202606:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in DevOps Test Hub	14 Oct 202616:29	–	ibm
IBM Security Bulletins	Security Bulletin: Spring Framework (spring-web) ‚Äî Open Redirect, Resource Exhaustion, Missing SameSite Cookie Attribute, and XML Memory Limit Bypass	17 Sep 202620:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	11 Sep 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	9 Sep 202601:25	–	ibm

NVD

Vulners

Node

vmware spring_frameworkRange<5.2.26

vmware spring_frameworkRange5.3.0–5.3.50

vmware spring_frameworkRange6.0.0–6.0.31

vmware spring_frameworkRange6.1.0–6.1.29

vmware spring_frameworkRange6.2.0–6.2.20

vmware spring_frameworkRange7.0.0–7.0.8.1

[
  {
    "vendor": "Spring",
    "product": "Spring Framework",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.8",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.19",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.28",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.30",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.3.0",
        "lessThanOrEqual": "5.3.49",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "5.2.25.RELEASE",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
spring	www.spring.io/security/cve-2026-47891

02 Sep 2026 17:36Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

EPSS0.00522

SSVC

CWE-770