Threats Tagged 'ghsa-9qf2-26p9-2q2q'

1 threat

Threats Tagged 'ghsa-9qf2-26p9-2q2q'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-47892Spring Framework · Incorrect Authorization Critical9.8EPSS 0.5%2026-08-27CVE Database V5CVE-2026-47892 CVE-2026-47892 is a critical authorization vulnerability in the Spring Framework affecting multiple versions from 5.2.5.RELEASE through 7.0.8. It allows bypass of header predicate checks in pre-flight requests when using WebFlux functional endpoints with DispatcherServlet, potentially compromising confidentiality, integrity, and availability of affected applications. EPSS 0.5%Vulnerability Spring #cwe-863 #ghsa-9qf2-26p9-2q2q	CVE Database V5	2026-08-27

Showing 1–1 of 1 result