3 entries matching spring — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-110879 | jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its gene | CRITICAL | 9.8 | 68%ile | NVD | 2026-10-28 |
| CVE-2026-69854 | Spring Cloud Azure Elevation of Privilege Vulnerability | CRITICAL | 9.0 | 53%ile | Microsoft | 2026-09-08 |
| CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability | HIGH | 8.2 | 44%ile | Microsoft | 2026-07-14 |