Spring Cloud Config vulnerabilities

• spring cloud config, vmware spring cloud config +1 more Spring Cloud Config Monitor Denial of Service CVE-2026-59315 5.3 MediumAugust 27, 2026
• spring cloud config, vmware spring cloud config +1 more Spring Cloud Config Server Native Environment Repository Exposure CVE-2026-47894 4.9 MediumAugust 27, 2026
• spring cloud config, vmware spring cloud config +1 more Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests CVE-2026-47837 6.8 MediumAugust 26, 2026
• spring cloud config, vmware spring cloud config +1 more Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN CVE-2026-47836 7.2 HighAugust 26, 2026
• spring cloud config, vmware spring cloud config, red hat enterprise linux 8 +1 more +3 more Spring Cloud Config has an Authorization Bypass Through User-Controlled Key CVE-2026-40981 Fix available 7.5 HighMay 7, 2026
• spring cloud config, vmware spring cloud config +1 more Spring Cloud Config Server Susceptible To TOCTOU Attack CVE-2026-41002 Fix available 7.4 HighMay 7, 2026
• spring cloud config, vmware spring cloud config +1 more Spring Cloud Config Server Logged Sensitive Information CVE-2026-41004 Fix available 4.4 MediumMay 7, 2026
• spring cloud config, vmware spring cloud config, red hat enterprise linux 8 +1 more +3 more Spring Cloud Config vulnerable to Path Traversal CVE-2026-40982 Public exploitFix available 9.1 CriticalMay 7, 2026
• spring cloud config Spring Cloud Config Server May Not Use Vault Token Sent By Clients CVE-2025-22232 5.3 MediumApril 10, 2025
• spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 more Directory Traversal with spring-cloud-config-server CVE-2020-5410 In KEVPublic exploitFix available EPSS 95.6% 7.5 HighJune 2, 2020
• spring cloud config, vmware spring cloud config +1 more Directory Traversal with spring-cloud-config-server CVE-2020-5405 Public exploitFix available EPSS 68.5% 6.5 MediumMarch 5, 2020
• spring cloud config, vmware spring cloud config, oracle communications cloud native core policy +2 more Directory Traversal with spring-cloud-config-server CVE-2019-3799 Public exploitFix available EPSS 85.3% 6.5 MediumMay 6, 2019