Pivotal Spring Framework: Schwachstelle ermöglicht Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Pivotal Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-41570 linked CVEs
Open advisory with all CVEs
More on Framework
Other advisories
- MediumCVE-2026-103997Davidanderson Redux Framework: fehlende Autorisierung
- MediumCVE-2026-103997Davidanderson Redux Framework: fehlende Autorisierung
- Not ratedosv:CLEANSTART-2026-JC13897In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http
- Not ratedosv:CLEANSTART-2026-PF79471Vitest is a Vite-native testing framework for JavaScript and TypeScript projects
- Not ratedosv:CLEANSTART-2026-SR47251Vite is a frontend tooling framework for JavaScript
- Not ratedosv:CLEANSTART-2026-VF31820Vite is a frontend tooling framework for JavaScript
- Not ratedosv:CLEANSTART-2026-XQ99685Vitest is a testing framework powered by Vite
- MediumCVE-2026-117645Phoenixframework Phoenix Html: Cross-Site-Scripting (XSS)
Other news entries
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideNewsThe Hacker News
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
- Volt Typhoon hides zero-day attacks using 'Silent Train' frameworkNewsBleepingComputer
- 3 Frameworks to Protect CISOs & Orgs Against AI LiabilityNewsDark Reading
- Former pentester used ARTEX AI to steal 8.2 million data recordsNewsBleepingComputer
- VMware Tanzu Spring Framework: Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsNewsThe Hacker News
- China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenantsNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4157
ID