PT-2026-82694

CVE-2026-59283

·

Published

2026-08-27

·

Updated

2026-10-08

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring Framework versions prior to 5.2.25.RELEASE
Description Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be subject to a safety guard bypass when the SpEL expression compiler is active.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CLEANSTART-2026-EC45528
CLEANSTART-2026-IP81999
CLEANSTART-2026-JL35312
CLEANSTART-2026-MN75797
CLEANSTART-2026-SX10115
Found an issue in the description? Have something to add? Feel free to write us 👾