CVE-2026-22745

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is serving static resources from...

CVE-2026-22741

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

EUVD-2026-26206

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

CVE-2026-22741 Static resource cache poisoning in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

CVE-2026-22741

CVE-2026-22741 – cache poisoning in static resources (Spring MVC/WebFlux) . When an app uses Spring MVC/WebFlux with resource chain caching enabled and encoded resource resolution, and the resource cache is empty, an attacker can poison the cache by sending crafted requests with incorrect encodin...

CVE-2026-22741 Static resource cache poisoning in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

CVE-2026-22741

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

Cache Poisoning

Spring MVC and WebFlux are vulnerable to Cache Poisoning. The vulnerability is due to improper handling of encoded resource resolution when resource chain caching is enabled, allowing attackers to store incorrectly encoded resources in the cache, which can break frontend asset delivery and lead t...

VMware Spring Framework security vulnerabilities

VMware Spring Framework is an open-source Java/JavaEE application framework developed by VMware, a US-based company. This framework helps developers build high-quality applications. There is a security vulnerability in the VMware Spring Framework, which stems from caching malicious resources duri...

CVE-2026-22741: Use of Cache Containing Sensitive Information

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

CVE-2026-22745: Uncontrolled Resource Consumption

Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is serving static resources from...

Linux nf_flow_table_free Heap Buffer Overflow DoS

The vulnerability of the nfflowtablefree function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Linux early_init_dt_scan_memory Heap Buffer Overflow

The vulnerability of the earlyinitdtscanmemory function in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to compromise data accessibility...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the hinicinitcmdqs function in the drivers/net/ethernet/huawei/hinic/hinichwcmdq.c file of the Linux Ethernet network adapter driver involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause...

Linux kernel Thermal Probe

The vulnerability of the hi3660thermalprobe function in the drivers/thermal/hisithermal.c module of the Linux kernel’s temperature control driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

Linux kernel i915_gem_object_is_framebuffer() Compromise Protected Information

The vulnerability of the i915gemobjectisframebuffer function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Linux RCU Barrier DoS

The vulnerability of the rcubarrier function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Linux net/rxrpc recvmsg Heap Buffer Overflow DoS

The vulnerability of the rxrpcrecvmsg function in the net/rxrpc/recvmsg.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux xas_retry Heap Buffer Overflow DoS

The vulnerability of the xasretry function in Linux operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-35908

Name of the Vulnerable Software and Affected Versions Spring MVC affected versions not specified Spring WebFlux affected versions not specified Description Applications using Spring MVC or Spring WebFlux are susceptible to cache poisoning during the resolution of static resources. This occurs whe...