CVE-2026-47879

ALTO 8.7CVE-2026-47879 · Published 27/08/2026 · updated 10/09/2026

Em resumo

CVE-2026-47879 é uma vulnerabilidade ALTO (CVSS 8.7) que afeta spring cloud gateway (vmware).
Chance de exploração nos próximos 30 dias (EPSS): 0.33%, maior que 26.2% das vulnerabilidades.
Correção: atualize para 4.2.10, 4.3.6, 5.0.3, 3.1.14 ou posterior.

Package	Affected versions	Patched versions
spring cloud gateway vmware	`≥ 4.0.0, < 4.2.10≥ 4.3.0, < 4.3.6≥ 5.0.0, < 5.0.3< 3.1.14`	`4.2.104.3.65.0.33.1.14`

Description

Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Spring Cloud Gateway 4.3.0 - 4.3.5 Spring Cloud Gateway 4.0.0 - 4.2.9 Spring Cloud Gateway 3.1.13 and earlier

References

spring.io/security/cve-2026-47879 · Vendor Advisory

Mais vulnerabilidades de spring cloud gateway

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

spring cloud gateway

vmware

≥ 4.0.0, < 4.2.10≥ 4.3.0, < 4.3.6≥ 5.0.0, < 5.0.3< 3.1.14

4.2.104.3.65.0.33.1.14

Mais vulnerabilidades de spring cloud gateway

Ver tudo →