CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100

SpringBlade versions 2.7.3 through 3.5.0 are affected by a privilege escalation vulnerability in an internal Feign user-creation endpoint exposed via @RestController without authorization checks. The gateway's authentication filter only validates JWT parsing without verifying user roles or caller...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

EUVD-2026-67854

SpringBlade versions 2.7.3 through 3.5.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestController without...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100: Missing Authorization

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

PT-2026-83258

Name of the Vulnerable Software and Affected Versions SpringBlade versions 2.7.3 through 4.9.9 Description Authenticated attackers can escalate privileges to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via...

com.clusterra:clusterra-iam-application (>=1.1.0.release, <=1.2.1.release), com.clusterra:clusterra-iam-rest (>=1.1.0.release, <=1.2.1.release) +44 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.16.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.16.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.clusterra:clusterra-iam-application =1.1.0.release,...

CVE-2021-22044

In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level @RequestMappingannotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to @RequestMapping-annotated interface methods...

org.noear:beetlsql-solon-plugin (1.0.32), org.noear:cron4j-solon-plugin (1.0.32) +44 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.32)

org.noear:solon MAVEN version 1.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:beetlsql-solon-plugin 1.0.32 - org.noear:cron4j-solon-plugin 1.0.32 - org.noear:dubbo-solon-plugin 1.0.32 -...

org.noear.solon:beetl-web (1.1.6), org.noear:beetlsql-solon-plugin (1.1.6) +46 more potentially affected by CVE-2023-48967 via org.noear:solon (1.1.6)

org.noear:solon MAVEN version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.1.6 - org.noear:beetlsql-solon-plugin 1.1.6 - org.noear:cron4j-solon-plugin 1.1.6 -...

org.noear.solon:beetl-web (1.1.8), org.noear:beetlsql-solon-plugin (1.1.8) +46 more potentially affected by CVE-2023-48967 via org.noear:solon (1.1.8)

org.noear:solon MAVEN version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.1.8 - org.noear:beetlsql-solon-plugin 1.1.8 - org.noear:cron4j-solon-plugin 1.1.8 -...

org.noear.solon:beetl-web (1.1.9), org.noear:beetlsql-solon-plugin (1.1.9) +47 more potentially affected by CVE-2023-48967 via org.noear:solon (1.1.9)

org.noear:solon MAVEN version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.1.9 - org.noear:beetlsql-solon-plugin 1.1.9 - org.noear:cron4j-solon-plugin 1.1.9 -...

org.noear.solon:beetl-web (1.1.10), org.noear:beetlsql-solon-plugin (1.1.10) +47 more potentially affected by CVE-2023-48967 via org.noear:solon (1.1.10)

org.noear:solon MAVEN version 1.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.1.10 - org.noear:beetlsql-solon-plugin 1.1.10 - org.noear:cron4j-solon-plugin 1.1.10 -...

org.noear.solon:beetl-web (1.2.3), org.noear:beetlsql-solon-plugin (1.2.3) +49 more potentially affected by CVE-2023-48967 via org.noear:solon (1.2.3)

org.noear:solon MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.2.3 - org.noear:beetlsql-solon-plugin 1.2.3 - org.noear:cron4j-solon-plugin 1.2.3 -...

org.noear.solon:beetl-web (1.2.5), org.noear:beetlsql-solon-plugin (1.2.5) +50 more potentially affected by CVE-2023-48967 via org.noear:solon (1.2.5)

org.noear:solon MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.2.5 - org.noear:beetlsql-solon-plugin 1.2.5 - org.noear:cron4j-solon-plugin 1.2.5 -...

org.noear.solon:beetl-web (1.2.7), org.noear:beetlsql-solon-plugin (1.2.7) +51 more potentially affected by CVE-2023-48967 via org.noear:solon (1.2.7)

org.noear:solon MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.2.7 - org.noear:beetlsql-solon-plugin 1.2.7 - org.noear:cron4j-solon-plugin 1.2.7 -...

org.noear.solon:beetl-web (1.2.8), org.noear:beetlsql-solon-plugin (1.2.8) +51 more potentially affected by CVE-2023-48967 via org.noear:solon (1.2.8)

org.noear:solon MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear.solon:beetl-web 1.2.8 - org.noear:beetlsql-solon-plugin 1.2.8 - org.noear:cron4j-solon-plugin 1.2.8 -...