DeutschShown in its original language — a full translation is planned for a future version.
VMware Tanzu Spring Cloud Gateway Server und Sleuth: Mehrere Schwachstellen
view advisory published 2026-06-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Cloud Gateway Server und Sleuth ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Daten zu manipulieren.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-47825US | — | — | ||
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux G… | ||||
| CVE-2026-41708US | — | — | ||
In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan