PT-2026-82545

🗓️ 27 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 22 Views

Path traversal in Spring Framework FreeMarker via untrusted view names with SpringTemplateLoader.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.1	14 Oct 202614:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026	29 Jun 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	8 Sep 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	11 Sep 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	9 Sep 202601:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	9 Sep 202601:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-33814
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59280
osv	www.osv.dev/vulnerability/CVE-2026-47889
osv	www.osv.dev/vulnerability/CVE-2026-46600
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-39822
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-0636
osv	www.osv.dev/vulnerability/CVE-2026-54516
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59900
osv	www.osv.dev/vulnerability/ghsa-c2gf-v879-257j
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-8384

29 Sep 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.14.3 - 7.5

EPSS0.00615

SSVC

Spring Framework path traversal FreeMarker template SpringTemplateLoader untrusted input view name resolution