Spring AI

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring vulnerabilities advisory covering Spring Data REST and Spring AI four high severity flaws CVE-2026-47849

Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched

Do Son August 21, 2026

TL;DR VMware disclosed four Spring vulnerabilities on August 20, 2026. All rate as HIGH severity. One hits...

Data Destruction and Memory Poisoning: Spring AI Vulnerabilities Threaten LLM Integrity Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Data Destruction and Memory Poisoning: Spring AI Vulnerabilities Threaten LLM Integrity

Do Son May 11, 2026

Spring AI, a popular framework designed to simplify AI integration for Spring developers, has issued an security...

Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores

Do Son April 28, 2026

Two significant vulnerabilities have been disclosed in Spring AI that could allow attackers to manipulate database queries...

Critical 9.8 CVSS SpEL Injection and SSRF Flaws Hit Spring AI Framework Spring AI Vulnerability Remote Code Execution (RCE)

Spring AI Vulnerability Remote Code Execution (RCE)

Critical 9.8 CVSS SpEL Injection and SSRF Flaws Hit Spring AI Framework

Do Son March 26, 2026

Spring AI, the popular framework for integrating Artificial Intelligence into Java applications, is facing a series of...

Critical Spring AI Flaws Expose Databases to SQL and JSONPath Injection Spring AI Vulnerability Remote Code Execution (RCE) Spring AI Vulnerability CVE-2026-22730

Spring AI Vulnerability Remote Code Execution (RCE) Spring AI Vulnerability CVE-2026-22730

Critical Spring AI Flaws Expose Databases to SQL and JSONPath Injection

Do Son March 17, 2026

Security researchers have issued a dual-threat alert for developers utilizing the Spring AI framework, a popular tool...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-77806CVSS 9.8
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-19598CVSS 9.8
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-19478CVSS 9.4
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8,...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-77647CVSS 9.8
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August...
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-69836CVSS 10.0
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Admin intel📅 Updated: Aug 21, 2026
CVE-2026-73570CVSS 8.9
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is...
Admin intelCISA KEV📅 Added to KEV: Aug 21, 2026📅 Updated: Aug 20, 2026
CVE-2026-72529CVSS 9.8
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,...
CISA KEV📅 Added to KEV: Aug 20, 2026
CVE-2026-72530CVSS 9.0
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9,...
CISA KEV📅 Added to KEV: Aug 20, 2026