CVE-2026-47883

EUVD-2026-66851 · Published Aug 27, 2026

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

Technologies

Vmware Spring Framework

Weaknesses

CWE-601

CVSS scores

v3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://spring.io/security/cve-2026-47883

Potentially impacted assets

See if this affects your attack surface