Vmware Spring Cloud Gateway vulnerabilities

• spring cloud gateway, vmware spring cloud gateway +1 more Spring Cloud Gateway SSRF and native file access with gRPC CVE-2026-47879 7.7 HighAugust 27, 2026
• spring cloud gateway, vmware spring cloud gateway +1 more Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situations CVE-2026-47825 8.6 HighJune 15, 2026
• vmware spring cloud gateway SSL bundle configuration silently bypassed in Spring Cloud Gateway CVE-2026-22750 Fix available 7.5 HighApril 10, 2026
• vmware spring cloud gateway server webflux Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables CVE-2025-41253 Fix available 7.5 HighOctober 16, 2025
• vmware spring cloud gateway, spring cloud gateway server mvc +1 more CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies CVE-2025-41235 Fix available 8.6 HighMay 30, 2025
• vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +3 more +5 more In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable... CVE-2022-22946 5.5 MediumMarch 4, 2022
• vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 more Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured CVE-2022-22947 In KEVPublic exploitFix available EPSS 98.3% 10.0 CriticalMarch 3, 2022
• vmware spring cloud gateway Request injection in Spring Cloud Gateway CVE-2021-22051 Fix available 6.5 MediumNovember 8, 2021