CVE-2026-22733 — Vulnetix

Try Vulnetix Request Demo

CVE-2026-22733 PUBLISHED

On March 19, 2026, Spring published security advisories to address vulnerabilities in the following products. Included was a critical update for the following: Spring Boot – multiple versions Spring Security – multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

EPSS 0.05% · 15.3th percentile

Risk Scores

EPSS Score

0.05%

15.3th percentile

Affected Products

Vendor	Product	Versions
VMware	Spring Security – multiple versions
VMware	Spring Boot – multiple versions

Timeline

Jan 14, 2026 PoC Published
Jan 14, 2026 PoC Published
Jan 15, 2026 PoC Published
Mar 19, 2026 PoC Published
Mar 19, 2026 CVE Published
Mar 20, 2026 EPSS Score
Mar 21, 2026 EPSS Score
Mar 21, 2026 PoC Published
Mar 21, 2026 PoC Published
Mar 22, 2026 EPSS Score
Mar 22, 2026 Security Advisory
Mar 23, 2026 EPSS Score

References

https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-259 advisory
https://spring.io/security/cve-2026-22731 vendor
https://spring.io/security/cve-2026-22732 vendor
https://spring.io/security/cve-2026-22733 vendor
https://spring.io/security vendor

Open in Interactive Console →