Skip to content
Threat Feed
Subscribe

Tag

Spring Security

2 briefs RSS
high advisory

VMware Spring Security Content-Length header suppression (CVE-2026-22732)

A vulnerability in Spring Security versions < 7.0.4 allows attackers to bypass security header injection by manipulating the Content-Length header, leading to the absence of X-Frame-Options and other security headers.

Spring Security vulnerability web-application spring-security header-manipulation
1t 1c
critical advisory

SAP Commerce Cloud Unauthenticated Remote Code Execution (CVE-2026-34263)

SAP Commerce Cloud is vulnerable to unauthenticated malicious configuration upload and code injection due to improper Spring Security configuration, resulting in arbitrary server-side code execution.

Commerce cloud CVE-2026-34263 rce sap spring security
2r 1t 1c