Skip to content
Threat Feed
Subscribe

Tag

Spring-Boot

4 briefs RSS
critical advisory

Multiple Vulnerabilities in Spring Boot Allow Authorization Bypass and Potential RCE

Multiple vulnerabilities in Spring Boot, including CVE-2026-40976, CVE-2026-40973, and CVE-2026-40972, can allow attackers to bypass authorization, hijack sessions, or achieve remote code execution, potentially leading to data breaches and system compromise.

Spring Boot spring-boot vulnerability rce authentication-bypass session-hijacking
2r 3t 3c
critical advisory

VMware Tanzu Spring Boot Multiple Vulnerabilities

Multiple vulnerabilities in VMware Tanzu Spring Boot allow attackers to execute arbitrary code, bypass security measures, manipulate or disclose sensitive data, or hijack authenticated users.

Tanzu Spring Boot vmware spring-boot vulnerability
2r 4t
medium threat

Spring Releases Security Updates for Multiple Spring Boot Versions

Spring released security advisories on April 23, 2026, addressing vulnerabilities in multiple Spring Boot versions, prompting users to update affected installations.

Spring Boot 4.0.x +4 spring spring-boot vulnerability patch
2r
high advisory

Spring Boot Actuator Misconfiguration Leads to Potential SharePoint Exfiltration via Stolen Credentials

A threat actor can exploit a misconfigured Spring Boot Actuator to steal credentials and potentially exfiltrate data from SharePoint after bypassing MFA.

Spring Boot +1 spring-boot actuator sharepoint credential-theft data-exfiltration
2r 4t 1i