Product
Spring Security
- First Reported
- May 5, 2026
- Latest Reported
- Aug 24, 2026
Reported Context (4)
- It affects Spring Security’s embedded UnboundID LDAP server and could allow an attacker to authenticate and modify entries in the in-memory directory. Spring Framework Updates Patch 91 Vulnerabilities
- Affecting Commerce Cloud and Data Hub, the third critical-severity weakness that SAP resolved this week is CVE-2026-22732 (CVSS score of 9.1), which impacts all applications that rely on the Spring Security framework. SAP Patches Four Critical Vulnerabilities in NetWeaver, Commerce and Data Hub
- CVE-2026-22732 — Spring Security (Critical, March 2026, CVSS 9.1) Why CVE Feeds and SCA Tools Can Miss End-of-Life Software
- CVE-2026-22732 — Spring Security (Critical, March 2026, CVSS 9.1) HeroDevs Warns CVE Feeds Can Miss Vulnerabilities in End-of-Life Packages
CVE (7)
Vendors (5)
Products (20)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.