K000162295: Spring vulnereability CVE-2026-41711 and CVE-2026-40988

🗓️ 16 Jul 2026 10:17:09Reported by f5Type

f5🔗 my.f5.com👁 15 Views

Vulnerabilities CVE-2026-41711 and CVE-2026-40988 in Spring cause DoS; no F5 products affected.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-data-commons jar	27 Jul 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jun 202610:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-security-core jar (CVE-2026-40988, CVE-2026-41694)	27 Jul 202607:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Data Commons [CVE-2026-41695, CVE-2026-41711, CVE-2026-41716, CVE-2026-41721 ]	27 Jul 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Security vulnerability that could allow Redirection to Untrusted Sites and Denial of Service (Dos) attacks	26 Jun 202618:27	–	ibm
Circl	CVE-2026-40988	10 Jun 202605:00	–	circl

16 Jul 2026 10:17Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5

EPSS0.00331

SSVC

spring data commons denial of service redirect binding