DeutschShown in its original language — a full translation is planned for a future version.
VMware Tanzu Spring Framework: Mehrere Schwachstellen
view advisory published 2026-06-08
Ein Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, sensible Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Cross-Site-Scripting- und Open-Redirect-Angriffe durchzuführen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41855US | critical9.8 | — | ||
In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter… | ||||
| CVE-2026-41854US | medium6.5 | — | ||
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forger… | ||||
| CVE-2026-41853US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 thr… | ||||
| CVE-2026-41852US | medium5.3OT elevated | — | ||
A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may… | ||||
| CVE-2026-41851US | high7.5 | — | ||
Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression t… | ||||
| CVE-2026-41850US | — | — | ||
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted ex… | ||||
| CVE-2026-41849US | — | — | ||
An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expres… | ||||
| CVE-2026-41848US | high7.5 | — | ||
Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to… | ||||
| CVE-2026-41847US | medium5.3 | — | ||
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.
Affected versions:
Spring Framework 5.3.0 through 5.3.48. | ||||
| CVE-2026-41846US | medium6.1 | — | ||
Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, po… | ||||
| CVE-2026-41845US | medium6.1 | — | ||
Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection in the browser, potentially resulting in a cross-site scripting (XSS)… | ||||
| CVE-2026-41844US | medium6.1 | — | ||
A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified allows an attacker to craft a link resulting in a 30… | ||||
| CVE-2026-41843US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 throug… | ||||
| CVE-2026-41842US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2… | ||||
| CVE-2026-41841US | — | — | ||
Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.… | ||||
| CVE-2026-41840US | — | — | ||
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.
Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 thr… | ||||
| CVE-2026-41839US | — | — | ||
A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for… | ||||
| CVE-2026-41838US | high7.5OT elevated | — | ||
IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rul… | ||||
02
references
External citations — patches, advisories, analysis.
- Spring Blog vom 2026-06-08external
- WID-SEC-W-2026-1828 - CSAF Versionself
- WID-SEC-2026-1828 - Portal Versionself
- Dell Security Advisory DSA-2026-385 vom 2026-08-31external
- IBM Security Bulletin 7280589 vom 2026-07-21external
- IBM Security Bulletin 7283059 vom 2026-08-10external
- PDFreactor 12 Hotfix Release 12.6.1 vom 2026-06-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan