CVE-2026-41003EPSS p7.9%

CVE-2026-41003CVE-2026-41003

vmware / spring_security

Description

An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.

Scoring

CVSS 7.6 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
EPSS0.18% probability of exploitation · percentile 7.9% · 2026-06-18T12:00:27Z
Last modified2026-06-12

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-41846
CVE
CVE-2026-41854
CVE
CVE-2026-41008
CVE
CVE-2026-41852
CVE
CVE-2026-41694
CVE
CVE-2026-41845
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.