Lucene search
+L

19 matches found

osv_cleanstart
osv_cleanstart
•added 2026/10/22 12:39 a.m.•12 views

CLEANSTART-2026-WK76356 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the rundeck package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

9.8CVSS7.4AI score0.00529EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:43 a.m.•22 views

CLEANSTART-2026-YE65839 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the apache-nifi-registry package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

9.8CVSS7.4AI score0.00529EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:34 a.m.•27 views

CLEANSTART-2026-CI58129 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the rundeck package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

9.8CVSS7.4AI score0.00529EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/29 12:38 a.m.•21 views

CLEANSTART-2026-LT41646 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the apache-hive package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

9.8CVSS7.4AI score0.00529EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•57 views

PT-2026-108461

Security vulnerability affects the apache-hive package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/08 12:42 p.m.•16 views

CVE-2026-47892

A flaw was found in Spring Framework. This vulnerability allows a header predicate bypass to occur in a pre-flight request within a WebFlux application that uses functional endpoints and is deployed with DispatcherServlet. This bypass could potentially lead to unexpected behavior or security poli...

9.8CVSS7.3AI score0.00529EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-47892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•58 views

Spring Framework 5.2.5 < 5.2.26 / 5.3.x < 5.3.50 / 6.0.x < 6.0.31 / 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 Header Predicate Bypass in WebFlux Functional Endpoints

The version of Spring Framework installed on the remote host is 5.2.5 prior to 5.2.26, 5.3.x prior to 5.3.50, 6.0.x prior to 6.0.31, 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - A WebFlux application using functional...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/27 6:31 a.m.•11 views

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3Affected Software1
osv_debian
osv_debian
•added 2026/08/27 6:17 a.m.•25 views

DEBIAN-CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/08/27 6:17 a.m.•22 views

UBUNTU-CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/27 6:17 a.m.•18 views

CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/27 5:21 a.m.•82 views

CVE-2026-47892 Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

0.00529EPSS
SaveExploits0References1
Mend
Mend
•added 2026/08/27 5:21 a.m.•10 views

CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/27 5:21 a.m.•25 views

CVE-2026-47892 Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

7.5AI score0.00529EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/27 5:21 a.m.•391 views

CVE-2026-47892

A header predicate bypass vulnerability exists in the Spring Framework when using WebFlux applications with functional endpoints and a DispatcherServlet . The flaw specifically impacts pre-flight requests . Affected versions include 7.0.0 - 7.0.8 , 6.2.0 - 6.2.19 , 6.1.0 - 6.1.28 , 6.0.0 - 6.0.30...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2026/08/27 5:21 a.m.•28 views

CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•27 views

PT-2026-82410

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring...

9.8CVSS7.4AI score0.00529EPSS
SaveExploits0References39
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/27 12:00 a.m.•7 views

CVE-2026-47892: Incorrect Authorization

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.6AI score0.00529EPSS
SaveExploits0References3
Rows per page
Query Builder