https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T03:56:19.645234+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-41839 CVE-2026-41839 — Spring Framework Escalation via Session Fixation in WebFlux 2026-10-02T03:56:19.646549+00:00

Affected: Spring Framework

A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user.

Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.