5.3

CVE-2026-59277

EPSS 0.21%
Veröffentlicht 27.08.2026 17:57:36
Zuletzt bearbeitet 02.09.2026 16:57:37
Erkennungen
Login

Spring Security InetAddressMatchers Incomplete Internal Network Classification

Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network.
Spring Security 7.1.0

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VMware ≫ Spring Security Version >= 7.1.0 < 7.1.0.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.109

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VMware	3.7	2.2	1.4	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://spring.io/security/cve-2026-59277

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-59277

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-59277

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-59277

EUVD