https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:58:33.826254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0883 certfr-2025-avi-0883 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Elles permettent à un attaquant de provoquer… 2026-10-02T13:58:33.832553+00:00 certfr-2025-avi-0883 https://cve.radiocsirt.org/vuln/euvd-2026-255232 EUVD-2026-255232 2026-10-02T13:58:33.832593+00:00 EUVD-2026-255232 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41253 fkie_cve-2025-41253 2026-10-02T13:58:33.832608+00:00

The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system properties to attackers.

An application should be considered vulnerable when all the following are true:

* The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable). * An admin or untrusted third party using Spring Expression Language (SpEL) to access environment variables or system properties via routes. * An untrusted third party could create a route that uses SpEL to access environment variables or system properties if: * The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway and management.endpoint.gateway.enabled=trueor management.endpoint.gateway.access=unrestricte. * The actuator endpoints are available to attackers. * The actuator endpoints are unsecured.

 https://cve.radiocsirt.org/vuln/ghsa-fwxx-wv44-7qfg GHSA-fwxx-wv44-7qfg — Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection 2026-10-02T13:58:33.832644+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-gateway-server

The following versions of Spring Cloud Gateway Server Webflux may be vulnerable to the ability to expose environment variables and system properties to attackers.

An application should be considered vulnerable when all the following are true:

* The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable). * An admin or untrusted third party using Spring Expression Language (SpEL) to access environment variables or system properties via routes. * An untrusted third party could create a route that uses SpEL to access environment variables or system properties if: * The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway and management.endpoint.gateway.enabled=trueor management.endpoint.gateway.access=unrestricte. * The actuator endpoints are available to attackers. * The actuator endpoints are unsecured.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2318 WID-SEC-W-2025-2318 — VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-02T13:58:33.832675+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um Informationen offenzulegen.