VDB
CVE-2026-22731
CVE-2026-22731
PUBLISHED
On March 19, 2026, Spring published security advisories to address vulnerabilities in the following products. Included was a critical update for the following: Spring Boot – multiple versions Spring Security – multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
EPSS 0.04% · 11.0th percentile
Risk Scores
EPSS Score
0.04%
11.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| VMware | Spring Security – multiple versions | |
| VMware | Spring Boot – multiple versions |
Timeline
- Jan 14, 2026 PoC Published
- Jan 14, 2026 PoC Published
- Jan 15, 2026 PoC Published
- Mar 19, 2026 PoC Published
- Mar 19, 2026 CVE Published
- Mar 19, 2026 PoC Published
- Mar 20, 2026 EPSS Score
- Mar 21, 2026 EPSS Score
- Mar 21, 2026 PoC Published
- Mar 22, 2026 EPSS Score
- Mar 22, 2026 Security Advisory
- Mar 23, 2026 EPSS Score