Vulnerability · Published Jun 11, 2026 · Assigned by vmware
CVE-2026-40996Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default
Medium 4.8
In plain English
A medium-severity broken cryptography in Spring Web Services from Spring. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption could therefore accept RSA PKCS#1 v1.5 (rsa-1_5) encrypted key material unless operators explicitly reconfigured the flag. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.springframework.ws:spring-ws-security | 5.0.2 | GHSA-p7qj-2q5w-f9r7 |
| Maven | org.springframework.ws:spring-ws-security | 4.1.4 | GHSA-p7qj-2q5w-f9r7 |
| Maven | org.springframework.ws:spring-ws-security | no fix listed | GHSA-p7qj-2q5w-f9r7 |
| Maven | org.springframework.ws:spring-ws-security | no fix listed | GHSA-p7qj-2q5w-f9r7 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Spring | Spring Web Services | 5.0.0 – before 5.0.1.14.1.0 – before 4.1.3.14.0.0 – before 4.0.193.1.0 – before 3.1.9 |
Weakness: CWE-327 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N