DeutschShown in its original language — a full translation is planned for a future version.
VMware Tanzu Spring Framework: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2026-04-19
Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-22745US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.
More precisely, an application can be vulnerable when all the fol… | ||||
| CVE-2026-22741US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
More precisely, an application can be vulnerable when all the following are… | ||||
| CVE-2026-22740US | — | — | ||
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the… | ||||
02
references
External citations — patches, advisories, analysis.
- Spring Security Advisories vom 2026-04-19external
- Spring Security Advisories vom 2026-04-19external
- Spring Security Advisories vom 2026-04-19external
- WID-SEC-W-2026-1177 - CSAF Versionself
- WID-SEC-2026-1177 - Portal Versionself
- IBM Security Bulletin 7275303 vom 2026-06-06external
- IBM Security Bulletin 7275306 vom 2026-06-06external
- PDFreactor 12.6.0 Changelog vom 2026-05-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan