cve-2026-41711 - MEDIUM - Potential Denial of Service through crafted Sort Parameters

🗓️ 09 Jun 2026 00:00:00Reported by SpringType

spring🔗 spring.io👁 14 Views

CVE-2026-41711 causes DoS via crafted Sort parameters causing StackOverflow in Spring Data Commons.

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-data-commons jar	27 Jul 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Data Commons [CVE-2026-41695, CVE-2026-41711, CVE-2026-41716, CVE-2026-41721 ]	27 Jul 202620:03	–	ibm
CNNVD	VMware Spring Data Commons 资源管理错误漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-41711	9 Jun 202623:48	–	cve
Cvelist	CVE-2026-41711 Potential Denial of Service through crafted Sort Parameters	9 Jun 202623:48	–	cvelist
EUVD	EUVD-2026-35897	10 Jun 202600:31	–	euvd
F5 Networks	K000162295: Spring vulnereability CVE-2026-41711 and CVE-2026-40988	16 Jul 202610:17	–	f5
NVD	CVE-2026-41711	10 Jun 202600:16	–	nvd
OSV	CLEANSTART-2026-BQ50387 Security fixes in apache-nifi 2.6.0-r3	30 Jul 202607:10	–	osv

09 Jun 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.15.9

EPSS0.0028

SSVC