Vulners
Lucene search
CVE-2026-40987 Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2026-40987 | 11 Jun 202612:40 | β | circl |
 | VMware Spring Integration θ·―εΎιεζΌζ΄ | 11 Jun 202600:00 | β | cnnvd |
 | CVE-2026-40987 | 11 Jun 202605:03 | β | cve |
 | EUVD-2026-36202 | 11 Jun 202605:03 | β | euvd |
 | CVE-2026-40987 | 11 Jun 202607:16 | β | nvd |
 | PT-2026-48615 | 11 Jun 202600:00 | β | ptsecurity |
 | CVE-2026-40987 | 30 Jun 202611:10 | β | redhatcve |
 | Directory Traversal | 10 Jun 202600:00 | β | snyk |
 | CVE-2026-40987: Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization | 10 Jun 202600:00 | β | spring |
 | cn.herodotus.engine:message-sdk-mqtt (>=3.1.5.6 <=3.5.5.2), cn.herodotus.engine:message-spring-boot-starter (>=3.1.5.6 <=3.5.5.2) +70 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=6.0.0 <=6.5.8) | 10 Jun 202600:00 | β | vulnersosv |
10
[
{
"vendor": "Spring",
"product": "Spring Integration",
"versions": [
{
"status": "affected",
"version": "7.0.0",
"lessThan": "7.0.4.1",
"versionType": "custom"
},
{
"status": "affected",
"version": "6.5.0",
"lessThan": "6.5.8.1",
"versionType": "custom"
},
{
"status": "affected",
"version": "6.4.0",
"lessThan": "6.4.12",
"versionType": "custom"
},
{
"status": "affected",
"version": "6.3.0",
"lessThan": "6.3.15",
"versionType": "custom"
},
{
"status": "affected",
"version": "5.5.0",
"lessThan": "5.5.21",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]| Source | Link |
|---|---|
| spring | www.spring.io/security/cve-2026-40987 |
Data
Build on a solid foundation withΒ Vulners data
WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data
Api
Power your application withΒ Vulners API
The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access
App
Assess and manage vulnerabilities withΒ VulnersΒ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jun 2026 19:45Current
CVSS 3.17.1
EPSS0.0021