CVE-2026-41711: CWE-400: Uncontrolled Resource Consumption in Spring Spring Data Commons
Spring Data Commons contains a vulnerability that may allow an attacker to cause a Denial of Service (DoS) by triggering a StackOverflowException when parsing Sort parameters. This affects multiple versions ranging from 2. 7. 0 through 4. 0. 5. The vulnerability is classified under CWE-400, indicating uncontrolled resource consumption. The CVSS score is 5. 9, reflecting a medium severity level.
AI Analysis
Technical Summary
CVE-2026-41711 is a vulnerability in Spring Data Commons where parsing of Sort parameters can lead to uncontrolled resource consumption resulting in a Denial of Service via a StackOverflowException. This affects versions 2.7.0 through 2.7.19, 3.0.0 through 3.0.15, 3.1.0 through 3.1.14, 3.2.0 through 3.2.15, 3.3.0 through 3.3.16, 3.4.0 through 3.4.14, 3.5.0 through 3.5.11, and 4.0.0 through 4.0.5. The vulnerability does not impact confidentiality or integrity but can cause service disruption. No official patch or remediation level has been published as of the data provided.
Potential Impact
Successful exploitation results in a Denial of Service condition due to a StackOverflowException caused by uncontrolled resource consumption when parsing Sort parameters. There is no impact on confidentiality or integrity. The service availability is affected, potentially causing application crashes or unresponsiveness.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing input validation or limiting the complexity of Sort parameters to reduce the risk of triggering the vulnerability. Monitor vendor communications for updates on patches or official mitigations.
CVE-2026-41711: CWE-400: Uncontrolled Resource Consumption in Spring Spring Data Commons
Description
Spring Data Commons contains a vulnerability that may allow an attacker to cause a Denial of Service (DoS) by triggering a StackOverflowException when parsing Sort parameters. This affects multiple versions ranging from 2. 7. 0 through 4. 0. 5. The vulnerability is classified under CWE-400, indicating uncontrolled resource consumption. The CVSS score is 5. 9, reflecting a medium severity level.
CVSS v3.1
Score 5.9medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-41711 is a vulnerability in Spring Data Commons where parsing of Sort parameters can lead to uncontrolled resource consumption resulting in a Denial of Service via a StackOverflowException. This affects versions 2.7.0 through 2.7.19, 3.0.0 through 3.0.15, 3.1.0 through 3.1.14, 3.2.0 through 3.2.15, 3.3.0 through 3.3.16, 3.4.0 through 3.4.14, 3.5.0 through 3.5.11, and 4.0.0 through 4.0.5. The vulnerability does not impact confidentiality or integrity but can cause service disruption. No official patch or remediation level has been published as of the data provided.
Potential Impact
Successful exploitation results in a Denial of Service condition due to a StackOverflowException caused by uncontrolled resource consumption when parsing Sort parameters. There is no impact on confidentiality or integrity. The service availability is affected, potentially causing application crashes or unresponsiveness.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing input validation or limiting the complexity of Sort parameters to reduce the risk of triggering the vulnerability. Monitor vendor communications for updates on patches or official mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- vmware
- Date Reserved
- 2026-04-22T06:21:34.490Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a28a8068dd33fbd8595efbd
Added to database: 6/9/2026, 11:55:50 PM
Last enriched: 6/10/2026, 12:13:32 AM
Last updated: 6/10/2026, 5:03:15 AM
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.