TNCVE-2026-22732 | Vulnetix

TNCVE-2026-22732 PUBLISHED

Record from tenable · Published March 19, 2026

When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP Headers: : from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.

Timeline

Mar 19, 2026 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln TNCVE-2026-22732
vulnetix vdb fixes TNCVE-2026-22732

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/TNCVE-2026-22732/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Tenable: CVE-2026-22732 advisory

Look up in the Resolve Platform →