Denial Of Service

🗓️ 14 Aug 2026 07:30:41Reported by Veracode Vulnerability DatabaseType

Spring Security SAML 2.0 REDIRECT binding DoS via unbounded writer inflating compressed payloads.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jun 202610:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-security-core jar (CVE-2026-40988, CVE-2026-41694)	27 Jul 202607:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Security vulnerability that could allow Redirection to Untrusted Sites and Denial of Service (Dos) attacks	26 Jun 202618:27	–	ibm
Circl	CVE-2026-40988	10 Jun 202605:00	–	circl
CNNVD	spring security 资源管理错误漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-40988	9 Jun 202623:46	–	cve
Cvelist	CVE-2026-40988 Unbounded DEFLATE Inflation in SAML 2.0 Service Provider	9 Jun 202623:46	–	cvelist
EUVD	EUVD-2026-35883	10 Jun 202600:31	–	euvd

Vulners

Node

Source	Link
github	www.github.com/spring-projects/spring-security/releases/tag/6.5.11
spring	www.spring.io/security/cve-2026-40988
github	www.github.com/spring-projects/spring-security/commit/9d4d9065b48508c9e115f2f894632120787fd1df

14 Aug 2026 09:03Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.17.5

EPSS0.00331

SSVC