CVE-2026-22746 User Attribute Enumeration when Using DaoAuthenticationProvider

🗓️ 22 Apr 2026 05:02:24Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

CVE-2026-22746: DaoAuthenticationProvider timing bypass via user enabled, expired, or locked attributes.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Observable Timing Discrepancy (CVE-2026-22746)	15 Jun 202620:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	28 May 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	14 Jul 202623:33	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-security-core-6.5.9.jar, IBM Sterling Connect:Direct Web Services is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition	6 Jun 202613:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2026	12 Jun 202622:52	–	ibm
ATTACKERKB	CVE-2026-22746	22 Apr 202605:02	–	attackerkb
Chainguard	CVE-2026-22746 vulnerabilities	30 Apr 202619:17	–	cgr
Circl	CVE-2026-22746	22 Apr 202608:43	–	circl
CNNVD	Spring Security 安全漏洞	22 Apr 202600:00	–	cnnvd

Source	Link
spring	www.spring.io/security/cve-2026-22746
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22746.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22746

15 Jul 2026 01:48Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.13.7

EPSS0.00215

Spring Security Timing attack Dao Authentication Provider User enabled attribute User expired attribute User locked attribute