Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

146855 matches found

Github Security Blog
Github Security Blog•added 2026/08/27 6:31 a.m.•7 views

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3Affected Software1
osv_debian
osv_debian•added 2026/08/27 6:17 a.m.•11 views

DEBIAN-CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References1
NVD
NVD•added 2026/08/27 6:17 a.m.•26 views

CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS0.00416EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/08/27 6:17 a.m.•23 views

DEBIAN-CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/08/27 6:17 a.m.•21 views

DEBIAN-CVE-2026-47884

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and where the view name is not explicitly specified. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28...

9.8CVSS6.6AI score0.00605EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve•added 2026/08/27 6:17 a.m.•34 views

CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2026/08/27 6:17 a.m.•14 views

UBUNTU-CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu•added 2026/08/27 6:17 a.m.•20 views

UBUNTU-CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve•added 2026/08/27 6:17 a.m.•18 views

CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References2
Mend
Mend•added 2026/08/27 5:21 a.m.•14 views

CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

8.7CVSS6.7AI score0.00416EPSS
SaveExploits0References1
CVE
CVE•added 2026/08/27 5:21 a.m.•254 views

CVE-2026-47893

A Spring WebFlux application supporting WebSocket connections may expose indirectly sensitive user information because request headers are included in an exception reason. Affected versions include Spring Framework 7.0.0 - 7.0.8 , 6.2.0 - 6.2.19 , 6.1.0 - 6.1.28 , 6.0.0 - 6.0.30 , 5.3.0 - 5.3.49 ...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2026/08/27 5:21 a.m.•67 views

CVE-2026-47893 Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

0.00416EPSS
SaveExploits0References1
osv_cve
osv_cve•added 2026/08/27 5:21 a.m.•5 views

CVE-2026-47893 Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS5.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/08/27 5:21 a.m.•17 views

CVE-2026-47893 Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

6.7AI score0.00416EPSS
SaveExploits0References1
Debian CVE
Debian CVE•added 2026/08/27 5:21 a.m.•19 views

CVE-2026-47893

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

7.5CVSS6.7AI score0.00416EPSS
SaveExploits0
EUVD
EUVD•added 2026/08/27 5:21 a.m.•16 views

EUVD-2026-66861

A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30...

6.8AI score0.00416EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/08/27 5:21 a.m.•81 views

CVE-2026-47892 Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

0.00529EPSS
SaveExploits0References1
Mend
Mend•added 2026/08/27 5:21 a.m.•9 views

CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0References3
Debian CVE
Debian CVE•added 2026/08/27 5:21 a.m.•27 views

CVE-2026-47892

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

9.8CVSS7.5AI score0.00529EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/08/27 5:21 a.m.•24 views

CVE-2026-47892 Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring...

7.5AI score0.00529EPSS
SaveExploits0References1
Rows per page
Query Builder