Spring Security

Products

ProductCVEsExploitedLatest
Spring Authorization Server1–Jul 16, 2026

Exploited and recent CVEs

  • CVE-2026-22752 Critical 9.6 Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata 0.5%