Known vulnerabilities in Spring Security 6.5.7

Vendor: Broadcom
Version: 6.5.7
Software CPE: cpe:2.3:a:broadcom:spring_security:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Security version 6.5.7 Spring Security 6.5.7 is affected by 5 vulnerabilities: 1 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139383 - Improper Authentication
CVE-2026-47838
CWE-287 Low
No
No
6.5.11 26.07.2026 SB2026072608
SB2026072615
SB2026072621
#VU128373 - Protection Mechanism Failure
CVE-2026-22732
CWE-693 High
No
No
5.7.22, 5.8.24, 6.3.15, 6.4.15, 6.5.9, 7.0.4 28.04.2026 SB20260427181
SB2026043058
SB2026050514
and 5 more
#VU128225 - Configuration
CVE-2026-22748
CWE-16 Low
No
No
6.3.15, 6.4.16, 6.5.10, 7.0.5 27.04.2026 SB20260427181
SB2026052513
#VU128224 - Observable discrepancy
CVE-2026-22746
CWE-203 Low
No
No
5.7.23, 5.8.25, 6.3.16, 6.4.16, 6.5.10, 7.0.5 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU128222 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-22751
CWE-367 Medium
No
No
6.4.16, 6.5.10, 7.0.5 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more