CVE-2026-47892

CVE-2026-47892 is a header predicate bypass in Spring Framework 's WebFlux module when functional endpoints are deployed with DispatcherServlet. An attacker can bypass header-based access controls by crafting specific pre-flight (OPTIONS) requests, effectively gaining incorrect authorization on p...