Known vulnerabilities in Spring Security 5.8.26

Vendor: Broadcom
Version: 5.8.26
Software CPE: cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Security version 5.8.26 Spring Security 5.8.26 is affected by 3 vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146379 - Information Exposure Through Timing Discrepancy
CVE-2026-59276
CWE-208 Medium
No
No
5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 31.08.2026 SB20260828170
SB2026090929
#VU146378 - Improper Access Control
CVE-2026-59270
CWE-284 High
No
No
5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 31.08.2026 SB20260828170
SB2026090929
#VU146240 - Not Using an Unpredictable IV with CBC Mode
CVE-2026-47842
CWE-329 Low
No
No
5.7.26, 5.8.28, 6.4.19, 6.5.12, 7.0.6.1, 7.0.7, 7.1.0.1, 7.1.1 28.08.2026 SB20260828170
SB2026090929