Pivotal Spring Framework: Schwachstelle ermöglicht Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Pivotal Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-41570 linked CVEs
Open advisory with all CVEs
More on Framework
Other advisories
- Highosv:MAL-2026-18434Malicious code in hs-framework (npm)
- Not ratedosv:CLSA-2026-1793463667TuxCare security update for org.springframework.ai (4 CVEs)
- Not ratedosv:CLEANSTART-2023-HR30108Rizin is a UNIX-like reverse engineering framework and command-line toolset
- Not ratedosv:CLEANSTART-2023-OH37013Rizin is a UNIX-like reverse engineering framework and command-line toolset
- Not ratedosv:CLEANSTART-2023-LS68492Rizin is a UNIX-like reverse engineering framework and command-line toolset
- Not ratedosv:CLEANSTART-2023-OX43727Rizin is a UNIX-like reverse engineering framework and command-line toolset
- Not ratedosv:CLEANSTART-2023-AQ38211Rizin is a UNIX-like reverse engineering framework and command-line toolset
- Not ratedosv:CLEANSTART-2023-RD07872Rizin is a UNIX-like reverse engineering framework and command-line toolset
Other news entries
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideNewsThe Hacker News
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
- Volt Typhoon hides zero-day attacks using 'Silent Train' frameworkNewsBleepingComputer
- 3 Frameworks to Protect CISOs & Orgs Against AI LiabilityNewsDark Reading
- Former pentester used ARTEX AI to steal 8.2 million data recordsNewsBleepingComputer
- VMware Tanzu Spring Framework: Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsNewsThe Hacker News
- China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenantsNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4157
ID