CVE-2026-22747
Unauthorized User Impersonation when Using X.509 Client Certificates
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Unauthorized User Impersonation when Using X.509 Client Certificates
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
- Record
CVE-2026-22747- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-297, CWE-295
- Updated
- 2026-11-02
EUVDEUVD-2026-24609
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
- Record
EUVD-2026-24609- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2jrg-rf5x-568g
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
- Record
GHSA-2jrg-rf5x-568g- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-297
- Updated
- 2026-11-02
NVD
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
- Record
CVE-2026-22747- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-297, CWE-295
- Updated
- 2026-11-02
OSV
Unauthorized User Impersonation when Using X.509 Client Certificates
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
- Record
CVE-2026-22747- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVGHSA-2jrg-rf5x-568g
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. This issue affects Spring Security: from 7.0.0 through 7.0.4.
- Record
GHSA-2jrg-rf5x-568g- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-297
- Updated
- 2026-11-02
Show 21 moreShow less
OSVCLSA-2026-1783386141 No score
TuxCare security update for org.springframework.security (4 CVEs)
TuxCare rebuilt 2 org.springframework.security packages to address 4 CVEs. Fixed in 5.7.11-tuxcare.4.
- Record
CLSA-2026-1783386141- Updated
- 2026-11-02
OSVCLSA-2026-1783645400 No score
TuxCare security update for org.springframework.security:spring-security-web (1 CVE)
TuxCare rebuilt org.springframework.security:spring-security-web to address 1 CVE. Fixed in 6.1.6-tuxcare.5.
- Record
CLSA-2026-1783645400- Updated
- 2026-11-02
OSVCLSA-2026-1784769509 No score
TuxCare security update for org.springframework.security:spring-security-web (2 CVEs)
TuxCare rebuilt org.springframework.security:spring-security-web to address 2 CVEs. Fixed in 6.2.2-tuxcare.3.
- Record
CLSA-2026-1784769509- Updated
- 2026-11-02
OSVCLSA-2026-1784769511 No score
TuxCare security update for org.springframework.security (2 CVEs)
TuxCare rebuilt 2 org.springframework.security packages to address 2 CVEs. Fixed in 5.8.16-tuxcare.13.
- Record
CLSA-2026-1784769511- Updated
- 2026-11-02
OSVCLSA-2026-1789583743 No score
TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 3 org.springframework.security packages to address 3 CVEs. Fixed in 4.2.20.RELEASE-tuxcare.7.
- Record
CLSA-2026-1789583743- Updated
- 2026-11-02
OSVCLSA-2026-1789676383 No score
TuxCare security update for org.springframework.security (8 CVEs)
TuxCare rebuilt 3 org.springframework.security packages to address 8 CVEs. Fixed in 5.8.14-tuxcare.1.
- Record
CLSA-2026-1789676383- Updated
- 2026-11-02
OSVCLSA-2026-1790159292 No score
TuxCare security update for org.springframework.security (9 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 9 CVEs. Fixed in 6.3.9-tuxcare.1.
- Record
CLSA-2026-1790159292- Updated
- 2026-11-02
OSVCLSA-2026-1790947292 No score
TuxCare security update for org.springframework.security:spring-security-web (1 CVE)
TuxCare rebuilt org.springframework.security:spring-security-web to address 1 CVE. Fixed in 5.7.12-tuxcare.10.
- Record
CLSA-2026-1790947292- Updated
- 2026-11-02
OSVCLSA-2026-1791380003 No score
TuxCare security update for org.springframework.security (11 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 11 CVEs. Fixed in 5.7.7-tuxcare.1.
- Record
CLSA-2026-1791380003- Updated
- 2026-11-02
OSVCLSA-2026-1791391633 No score
TuxCare security update for org.springframework.security (11 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 11 CVEs. Fixed in 5.5.8-tuxcare.1.
- Record
CLSA-2026-1791391633- Updated
- 2026-11-02
OSVCLSA-2026-1791392813 No score
TuxCare security update for org.springframework.security (10 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 10 CVEs. Fixed in 5.6.9-tuxcare.1.
- Record
CLSA-2026-1791392813- Updated
- 2026-11-02
OSVCLSA-2026-1792077066 No score
TuxCare security update for org.springframework.security (8 CVEs)
TuxCare rebuilt 5 org.springframework.security packages to address 8 CVEs. Fixed in 6.0.8-tuxcare.4.
- Record
CLSA-2026-1792077066- Updated
- 2026-11-02
OSVCLSA-2026-1792079446 No score
TuxCare security update for org.springframework.security (15 CVEs)
TuxCare rebuilt 5 org.springframework.security packages to address 15 CVEs. Fixed in 6.0.7-tuxcare.1.
- Record
CLSA-2026-1792079446- Updated
- 2026-11-02
OSVCLSA-2026-1792084952 No score
TuxCare security update for org.springframework.security (11 CVEs)
TuxCare rebuilt 5 org.springframework.security packages to address 11 CVEs. Fixed in 5.8.15-tuxcare.2.
- Record
CLSA-2026-1792084952- Updated
- 2026-11-02
OSVCLSA-2026-1792085061 No score
TuxCare security update for org.springframework.security (3 CVEs)
TuxCare rebuilt 3 org.springframework.security packages to address 3 CVEs. Fixed in 5.7.14-tuxcare.8.
- Record
CLSA-2026-1792085061- Updated
- 2026-11-02
OSVCLSA-2026-1792089227 No score
TuxCare security update for org.springframework.security (10 CVEs)
TuxCare rebuilt 5 org.springframework.security packages to address 10 CVEs. Fixed in 5.6.7-tuxcare.1.
- Record
CLSA-2026-1792089227- Updated
- 2026-11-02
OSVCLSA-2026-1792099598 No score
TuxCare security update for org.springframework.security (4 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 4 CVEs. Fixed in 5.6.10-tuxcare.8.
- Record
CLSA-2026-1792099598- Updated
- 2026-11-02
OSVCLSA-2026-1792102802 No score
TuxCare security update for org.springframework.security (8 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 8 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792102802- Updated
- 2026-11-02
OSVCLSA-2026-1792502421 No score
TuxCare security update for org.springframework.security (6 CVEs)
TuxCare rebuilt 4 org.springframework.security packages to address 6 CVEs. Fixed in 5.1.4.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792502421- Updated
- 2026-11-02
OSVCLSA-2026-1792503291 No score
TuxCare security update for org.springframework.security (9 CVEs)
TuxCare rebuilt 5 org.springframework.security packages to address 9 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792503291- Updated
- 2026-11-02
OSVCLSA-2026-1792588191 No score
TuxCare security update for org.springframework.security (9 CVEs)
TuxCare rebuilt 5 org.springframework.security packages to address 9 CVEs. Fixed in 3.2.8.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792588191- Updated
- 2026-11-02
Affected products
- spring security
- vmware spring security
- red hat openshift developer tools and services
- red hat build of apache camel - hawtio 4
- red hat build of apache camel for spring boot 4
- red hat build of quarkus
- red hat data grid 8
- red hat fuse 7
- red hat jboss enterprise application platform 7
- red hat jboss enterprise application platform 8
- red hat jboss enterprise application platform expansion pack
- red hat openshift dev spaces
Show 2 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework.security:spring-security-webMaven |
7.0.0 to 7.0.4 | 7.0.5 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 4 CVEs |
5.7.11 up to 5.7.11-tuxcare.4, plus listed versions 5.7.11-tuxcare.15.7.11-tuxcare.25.7.11-tuxcare.35.7.11.tuxcare |
5.7.11-tuxcare.4 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 4 CVEs |
5.7.11 up to 5.7.11-tuxcare.4, plus listed versions 5.7.11-tuxcare.15.7.11-tuxcare.25.7.11-tuxcare.35.7.11.tuxcare |
5.7.11-tuxcare.4 |
org.springframework.security:spring-security-webTuxCare:Maven |
6.1.6 up to 6.1.6-tuxcare.5, plus listed versions 6.1.6-tuxcare.16.1.6-tuxcare.26.1.6-tuxcare.36.1.6-tuxcare.4 |
6.1.6-tuxcare.5 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 2 CVEs |
6.2.2 up to 6.2.2-tuxcare.3, plus listed versions 6.2.2-tuxcare.16.2.2-tuxcare.2 |
6.2.2-tuxcare.3 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 2 CVEs |
5.8.16 up to 5.8.16-tuxcare.13, plus listed versions 5.8.16-tuxcare.105.8.16-tuxcare.115.8.16-tuxcare.125.8.16-tuxcare.45.8.16-tuxcare.5 Show 8 moreShow less5.8.16-tuxcare.65.8.16-tuxcare.75.8.16-tuxcare.85.8.16-tuxcare.95.8.16.tuxcare5.8.16.tuxcare.15.8.16.tuxcare.25.8.16.tuxcare.3 |
5.8.16-tuxcare.13 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 2 CVEs |
5.8.16 up to 5.8.16-tuxcare.13, plus listed versions 5.8.16-tuxcare.105.8.16-tuxcare.115.8.16-tuxcare.125.8.16-tuxcare.45.8.16-tuxcare.5 Show 8 moreShow less5.8.16-tuxcare.65.8.16-tuxcare.75.8.16-tuxcare.85.8.16-tuxcare.95.8.16.tuxcare5.8.16.tuxcare.15.8.16.tuxcare.25.8.16.tuxcare.3 |
5.8.16-tuxcare.13 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 3 CVEs |
4.2.20.RELEASE up to 4.2.20.RELEASE-tuxcare.7, plus listed versions 4.2.20.RELEASE-tuxcare.14.2.20.RELEASE-tuxcare.24.2.20.RELEASE-tuxcare.34.2.20.RELEASE-tuxcare.44.2.20.RELEASE-tuxcare.54.2.20.RELEASE-tuxcare.6 |
4.2.20.RELEASE-tuxcare.7 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 3 CVEs |
4.2.20.RELEASE up to 4.2.20.RELEASE-tuxcare.7, plus listed versions 4.2.20.RELEASE-tuxcare.14.2.20.RELEASE-tuxcare.24.2.20.RELEASE-tuxcare.34.2.20.RELEASE-tuxcare.44.2.20.RELEASE-tuxcare.54.2.20.RELEASE-tuxcare.6 |
4.2.20.RELEASE-tuxcare.7 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 3 CVEs |
4.2.20.RELEASE up to 4.2.20.RELEASE-tuxcare.7, plus listed versions 4.2.20.RELEASE-tuxcare.14.2.20.RELEASE-tuxcare.24.2.20.RELEASE-tuxcare.34.2.20.RELEASE-tuxcare.44.2.20.RELEASE-tuxcare.54.2.20.RELEASE-tuxcare.6 |
4.2.20.RELEASE-tuxcare.7 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.8.14 up to 5.8.14-tuxcare.1 | 5.8.14-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 8 CVEs |
5.8.14 up to 5.8.14-tuxcare.1 | 5.8.14-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 8 CVEs |
5.8.14 up to 5.8.14-tuxcare.1 | 5.8.14-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 9 CVEs |
6.3.9 up to 6.3.9-tuxcare.1 | 6.3.9-tuxcare.1 |
org.springframework.security:spring-security-oauth2-joseTuxCare:Maven From an advisory covering 9 CVEs |
6.3.9 up to 6.3.9-tuxcare.1 | 6.3.9-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 9 CVEs |
6.3.9 up to 6.3.9-tuxcare.1 | 6.3.9-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 9 CVEs |
6.3.9 up to 6.3.9-tuxcare.1 | 6.3.9-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven |
5.7.12 up to 5.7.12-tuxcare.10, plus listed versions 5.7.12-tuxcare.15.7.12-tuxcare.25.7.12-tuxcare.35.7.12-tuxcare.45.7.12-tuxcare.5 Show 4 moreShow less5.7.12-tuxcare.65.7.12-tuxcare.75.7.12-tuxcare.85.7.12-tuxcare.9 |
5.7.12-tuxcare.10 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 11 CVEs |
5.7.7 up to 5.7.7-tuxcare.1 | 5.7.7-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 11 CVEs |
5.7.7 up to 5.7.7-tuxcare.1 | 5.7.7-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 11 CVEs |
5.7.7 up to 5.7.7-tuxcare.1 | 5.7.7-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 11 CVEs |
5.7.7 up to 5.7.7-tuxcare.1 | 5.7.7-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 11 CVEs |
5.5.8 up to 5.5.8-tuxcare.1 | 5.5.8-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 11 CVEs |
5.5.8 up to 5.5.8-tuxcare.1 | 5.5.8-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 11 CVEs |
5.5.8 up to 5.5.8-tuxcare.1 | 5.5.8-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 11 CVEs |
5.5.8 up to 5.5.8-tuxcare.1 | 5.5.8-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.6.9 up to 5.6.9-tuxcare.1 | 5.6.9-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 10 CVEs |
5.6.9 up to 5.6.9-tuxcare.1 | 5.6.9-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 10 CVEs |
5.6.9 up to 5.6.9-tuxcare.1 | 5.6.9-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 10 CVEs |
5.6.9 up to 5.6.9-tuxcare.1 | 5.6.9-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 8 CVEs |
6.0.8 up to 6.0.8-tuxcare.4, plus listed versions 6.0.8-tuxcare.16.0.8-tuxcare.26.0.8-tuxcare.3 |
6.0.8-tuxcare.4 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 8 CVEs |
6.0.8 up to 6.0.8-tuxcare.4, plus listed versions 6.0.8-tuxcare.16.0.8-tuxcare.26.0.8-tuxcare.3 |
6.0.8-tuxcare.4 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 8 CVEs |
6.0.8 up to 6.0.8-tuxcare.4, plus listed versions 6.0.8-tuxcare.16.0.8-tuxcare.26.0.8-tuxcare.3 |
6.0.8-tuxcare.4 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 8 CVEs |
6.0.8 up to 6.0.8-tuxcare.4, plus listed versions 6.0.8-tuxcare.16.0.8-tuxcare.26.0.8-tuxcare.3 |
6.0.8-tuxcare.4 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 8 CVEs |
6.0.8 up to 6.0.8-tuxcare.4, plus listed versions 6.0.8-tuxcare.16.0.8-tuxcare.26.0.8-tuxcare.3 |
6.0.8-tuxcare.4 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 15 CVEs |
6.0.7 up to 6.0.7-tuxcare.1 | 6.0.7-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 15 CVEs |
6.0.7 up to 6.0.7-tuxcare.1 | 6.0.7-tuxcare.1 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 15 CVEs |
6.0.7 up to 6.0.7-tuxcare.1 | 6.0.7-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 15 CVEs |
6.0.7 up to 6.0.7-tuxcare.1 | 6.0.7-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 15 CVEs |
6.0.7 up to 6.0.7-tuxcare.1 | 6.0.7-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 11 CVEs |
5.8.15 up to 5.8.15-tuxcare.2, plus listed versions 5.8.15.tuxcare5.8.15.tuxcare.1 |
5.8.15-tuxcare.2 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 11 CVEs |
5.8.15 up to 5.8.15-tuxcare.2, plus listed versions 5.8.15.tuxcare5.8.15.tuxcare.1 |
5.8.15-tuxcare.2 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 11 CVEs |
5.8.15 up to 5.8.15-tuxcare.2, plus listed versions 5.8.15.tuxcare5.8.15.tuxcare.1 |
5.8.15-tuxcare.2 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 11 CVEs |
5.8.15 up to 5.8.15-tuxcare.2, plus listed versions 5.8.15.tuxcare5.8.15.tuxcare.1 |
5.8.15-tuxcare.2 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 11 CVEs |
5.8.15 up to 5.8.15-tuxcare.2, plus listed versions 5.8.15.tuxcare5.8.15.tuxcare.1 |
5.8.15-tuxcare.2 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 3 CVEs |
5.7.14 up to 5.7.14-tuxcare.8, plus listed versions 5.7.14-tuxcare.15.7.14-tuxcare.25.7.14-tuxcare.35.7.14-tuxcare.45.7.14-tuxcare.55.7.14-tuxcare.65.7.14-tuxcare.7 |
5.7.14-tuxcare.8 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 3 CVEs |
5.7.14 up to 5.7.14-tuxcare.8, plus listed versions 5.7.14-tuxcare.15.7.14-tuxcare.25.7.14-tuxcare.35.7.14-tuxcare.45.7.14-tuxcare.55.7.14-tuxcare.65.7.14-tuxcare.7 |
5.7.14-tuxcare.8 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 3 CVEs |
5.7.14 up to 5.7.14-tuxcare.8, plus listed versions 5.7.14-tuxcare.15.7.14-tuxcare.25.7.14-tuxcare.35.7.14-tuxcare.45.7.14-tuxcare.55.7.14-tuxcare.65.7.14-tuxcare.7 |
5.7.14-tuxcare.8 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.6.7 up to 5.6.7-tuxcare.1 | 5.6.7-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 10 CVEs |
5.6.7 up to 5.6.7-tuxcare.1 | 5.6.7-tuxcare.1 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 10 CVEs |
5.6.7 up to 5.6.7-tuxcare.1 | 5.6.7-tuxcare.1 |
org.springframework.security:spring-security-saml2-service-providerTuxCare:Maven From an advisory covering 10 CVEs |
5.6.7 up to 5.6.7-tuxcare.1 | 5.6.7-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 10 CVEs |
5.6.7 up to 5.6.7-tuxcare.1 | 5.6.7-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 4 CVEs |
5.6.10 up to 5.6.10-tuxcare.8, plus listed versions 5.6.10-tuxcare.15.6.10-tuxcare.25.6.10-tuxcare.35.6.10-tuxcare.45.6.10-tuxcare.55.6.10-tuxcare.65.6.10-tuxcare.7 |
5.6.10-tuxcare.8 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 4 CVEs |
5.6.10 up to 5.6.10-tuxcare.8, plus listed versions 5.6.10-tuxcare.15.6.10-tuxcare.25.6.10-tuxcare.35.6.10-tuxcare.45.6.10-tuxcare.55.6.10-tuxcare.65.6.10-tuxcare.7 |
5.6.10-tuxcare.8 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 4 CVEs |
5.6.10 up to 5.6.10-tuxcare.8, plus listed versions 5.6.10-tuxcare.15.6.10-tuxcare.25.6.10-tuxcare.35.6.10-tuxcare.45.6.10-tuxcare.55.6.10-tuxcare.65.6.10-tuxcare.7 |
5.6.10-tuxcare.8 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 4 CVEs |
5.6.10 up to 5.6.10-tuxcare.8, plus listed versions 5.6.10-tuxcare.15.6.10-tuxcare.25.6.10-tuxcare.35.6.10-tuxcare.45.6.10-tuxcare.55.6.10-tuxcare.65.6.10-tuxcare.7 |
5.6.10-tuxcare.8 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 8 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 8 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 8 CVEs |
5.1.5.RELEASE up to 5.1.5.RELEASE-tuxcare.1 | 5.1.5.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 6 CVEs |
5.1.4.RELEASE up to 5.1.4.RELEASE-tuxcare.1 | 5.1.4.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 6 CVEs |
5.1.4.RELEASE up to 5.1.4.RELEASE-tuxcare.1 | 5.1.4.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 6 CVEs |
5.1.4.RELEASE up to 5.1.4.RELEASE-tuxcare.1 | 5.1.4.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 6 CVEs |
5.1.4.RELEASE up to 5.1.4.RELEASE-tuxcare.1 | 5.1.4.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-bomTuxCare:Maven From an advisory covering 9 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 9 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 9 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-ldapTuxCare:Maven From an advisory covering 9 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 9 CVEs |
5.1.6.RELEASE up to 5.1.6.RELEASE-tuxcare.1 | 5.1.6.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-bomTuxCare:Maven From an advisory covering 9 CVEs |
3.2.8.RELEASE up to 3.2.8.RELEASE-tuxcare.1 | 3.2.8.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-casTuxCare:Maven From an advisory covering 9 CVEs |
3.2.8.RELEASE up to 3.2.8.RELEASE-tuxcare.1 | 3.2.8.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-coreTuxCare:Maven From an advisory covering 9 CVEs |
3.2.8.RELEASE up to 3.2.8.RELEASE-tuxcare.1 | 3.2.8.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-cryptoTuxCare:Maven From an advisory covering 9 CVEs |
3.2.8.RELEASE up to 3.2.8.RELEASE-tuxcare.1 | 3.2.8.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-webTuxCare:Maven From an advisory covering 9 CVEs |
3.2.8.RELEASE up to 3.2.8.RELEASE-tuxcare.1 | 3.2.8.RELEASE-tuxcare.1 |
org.springframework.security:spring-security-webMaven |
7.0.0 up to 7.0.5, plus listed versions 7.0.17.0.27.0.37.0.4 |
7.0.5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | gsadagopan/cve-2026-22747-sandbox | 2026-08-09 |
| PoC in GitHub | yakissa/CVE-2026-22747 | 2026-10-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, affected_more | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-22747 is a medium vulnerability (CVSS 6.8) in Spring Security, published April 22, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in org.springframework.security:spring-security-web 7.0.5.
References
spring.io/security/cve-2026-22747
access.redhat.com/security/cve/CVE-2026-22747
bugzilla.redhat.com/show_bug.cgi?id=2460487
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22747.json
nvd.nist.gov/vuln/detail/CVE-2026-22747
github.com/spring-projects/spring-security/commit/88118afb8f9357ae7cc215500a441e89fee701c3