https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:01:17.141811+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0417 certfr-2026-avi-0417 — Une vulnérabilité a été découverte dans Spring Cloud Gateway. Elle permet à un attaquant de provoquer un problème de sé… 2026-10-05T02:01:17.196265+00:00 certfr-2026-avi-0417 https://cve.radiocsirt.org/vuln/euvd-2026-290357 EUVD-2026-290357 2026-10-05T02:01:17.196306+00:00 EUVD-2026-290357 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22750 fkie_cve-2026-22750 2026-10-05T02:01:17.196320+00:00

When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration was used instead. Note: The 4.2.x branch is no longer under open source support. If you are using Spring Cloud Gateway 4.2.0 and are not an enterprise customer, you can upgrade to any Spring Cloud Gateway 4.2.x release newer than 4.2.0  available on Maven Centeral https://repo1.maven.org/maven2/org/springframework/cloud/spring-cloud-gateway/ . Ideally if you are not an enterprise customer, you should be upgrading to 5.0.2 or 5.1.1 which are the current supported open source releases.

 https://cve.radiocsirt.org/vuln/ghsa-hwqh-2684-54fc GHSA-hwqh-2684-54fc — Spring Cloud Gateway's SSL bundle configuration silently bypassed 2026-10-05T02:01:17.196352+00:00

Affected: Maven: org.springframework.cloud:spring-cloud-gateway

When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration was used instead.

Note: The 4.2.x branch is no longer under open source support. If you are using Spring Cloud Gateway 4.2.0 and are not an enterprise customer, you can upgrade to any Spring Cloud Gateway 4.2.x release newer than 4.2.0 available on Maven Centeral https://repo1.maven.org/maven2/org/springframework/cloud/spring-cloud-gateway/ . Ideally, if you are not an enterprise customer, you should be upgrading to 5.0.2 or 5.1.1, which are the current supported open source releases.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1041 WID-SEC-W-2026-1041 — VMware Tanzu Spring Cloud Gateway: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-05T02:01:17.196380+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud Gateway ausnutzen, um Sicherheitsvorkehrungen zu umgehen.