Product
Spring Boot
- First Reported
- Mar 18, 2026
- Latest Reported
- Jun 2, 2026
Reported Context (2)
- The MCP server was deployed as part of a Spring Boot application integrating AI-driven voice and messaging capabilities into a customer-facing communications platform. The exposed toolset reveals the underlying AI Unauthenticated MCP Server Exposed AWS Credentials Through SSRF and File Inclusion
- From Misconfigured Spring Boot Actuator to SharePoint Exfiltration: How Stolen Credentials Bypass MFA Exposed Spring Boot Actuator and Stolen Credentials Enable SharePoint Data Theft
CVE (6)
Malware (2)
Threat Actors (1)
Vendors (4)
Products (10)
Tools (3)
Industries (4)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.