CLSA-2026-1789286187 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.3.13-tuxcare.5...

CLSA-2026-1789285864 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 4 org.springframework.data packages to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CLSA-2026-1789285409 TuxCare security update for org.springframework.data:spring-data-ldap (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-ldap to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CLSA-2026-1789285402 TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

PT-2026-90971

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

CVE-2026-90594: Missing Authorization

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

PT-2026-90979

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

PT-2026-90974

Name of the Vulnerable Software and Affected Versions wxiaoqi Spring-Cloud-Platform version 1.0 wxiaoqi Spring-Cloud-Platform version 2.2 wxiaoqi Spring-Cloud-Platform version 3.0 Description A security flaw allows remote attackers to bypass authorization. The issue resides in the getOnlineInfo...

CVE-2026-90595: Missing Authorization

A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed...

Security Bulletin: Multiple vulnerabilities that affects Cirata Symphony for IBM Big Replicate

Summary netty-resolver-dns, netty-codec-classes-quic, netty-codec-redis, spring-core, netty-codec-http2, netty-handler, spring-expression, netty-transport-sctp, netty-codec-http3, netty-codec-haproxy, micrometer-core, netty-transport-native-epoll, spring-boot-autoconfigure, netty-codec-http,...

CLSA-2026-1789225570 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.6...

CLSA-2026-1789218209 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.13...

Security Bulletin: Security Misconfiguration Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22748)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-22748 DESCRIPTION: Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecode...

CLSA-2026-1789149911 TuxCare security update for org.springframework.graphql:spring-graphql (1 CVE)

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 1 CVE. Fixed in 1.3.5-tuxcare.4...

CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap (1 CVE)

TuxCare rebuilt 8 org.springframework.ldap packages to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.4.23 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Vulnerabilities Affecting SICK CorivaEngine

SICK CorivaEngine includes the third-party components Netty and Spring Cloud Gateway that are affected by multiple known vulnerabilities. Under certain conditions, these vulnerabilities could allow remote attackers to perform HTTP request smuggling, cause resource exhaustion, or manipulate...

Exploit for Forced Browsing in Vmware Spring_Security

CVE-2026-22732 — Proof of Concept Spring Security silently dr...

ROOT-APP-MAVEN-CVE-2026-22753 CVE-2026-22753 in org.springframework.security:spring-security-config - Patched by Root

Root has patched CVE-2026-22753 in the org.springframework.security:spring-security-config package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22754 CVE-2026-22754 in org.springframework.security:spring-security-config - Patched by Root

Root has patched CVE-2026-22754 in the org.springframework.security:spring-security-config package for Root:Maven. Multiple fixed versions available...