CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41716

Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11; 4.0.0 through 4.0.5.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 24.0%

CVSS Severity

CVSS v3 Score 7.5

References

https://spring.io/security/cve-2026-41716

Products affected by CVE-2026-41716

Broadcom » Spring Data Commons » Version: 2.7.0

cpe:2.3:a:broadcom:spring_data_commons:2.7.0
Broadcom » Spring Data Commons » Version: 2.7.1

cpe:2.3:a:broadcom:spring_data_commons:2.7.1
Broadcom » Spring Data Commons » Version: 2.7.10

cpe:2.3:a:broadcom:spring_data_commons:2.7.10
Broadcom » Spring Data Commons » Version: 2.7.11

cpe:2.3:a:broadcom:spring_data_commons:2.7.11
Broadcom » Spring Data Commons » Version: 2.7.12

cpe:2.3:a:broadcom:spring_data_commons:2.7.12
Broadcom » Spring Data Commons » Version: 2.7.13

cpe:2.3:a:broadcom:spring_data_commons:2.7.13
Broadcom » Spring Data Commons » Version: 2.7.14

cpe:2.3:a:broadcom:spring_data_commons:2.7.14
Broadcom » Spring Data Commons » Version: 2.7.15

cpe:2.3:a:broadcom:spring_data_commons:2.7.15
Broadcom » Spring Data Commons » Version: 2.7.16

cpe:2.3:a:broadcom:spring_data_commons:2.7.16
Broadcom » Spring Data Commons » Version: 2.7.17

cpe:2.3:a:broadcom:spring_data_commons:2.7.17
Broadcom » Spring Data Commons » Version: 2.7.18

cpe:2.3:a:broadcom:spring_data_commons:2.7.18
Broadcom » Spring Data Commons » Version: 2.7.2

cpe:2.3:a:broadcom:spring_data_commons:2.7.2
Broadcom » Spring Data Commons » Version: 2.7.3

cpe:2.3:a:broadcom:spring_data_commons:2.7.3
Broadcom » Spring Data Commons » Version: 2.7.4

cpe:2.3:a:broadcom:spring_data_commons:2.7.4
Broadcom » Spring Data Commons » Version: 2.7.5

cpe:2.3:a:broadcom:spring_data_commons:2.7.5
Broadcom » Spring Data Commons » Version: 2.7.6

cpe:2.3:a:broadcom:spring_data_commons:2.7.6
Broadcom » Spring Data Commons » Version: 2.7.7

cpe:2.3:a:broadcom:spring_data_commons:2.7.7
Broadcom » Spring Data Commons » Version: 2.7.8

cpe:2.3:a:broadcom:spring_data_commons:2.7.8
Broadcom » Spring Data Commons » Version: 2.7.9

cpe:2.3:a:broadcom:spring_data_commons:2.7.9
Broadcom » Spring Data Commons » Version: 3.3.0

cpe:2.3:a:broadcom:spring_data_commons:3.3.0
Broadcom » Spring Data Commons » Version: 3.3.1

cpe:2.3:a:broadcom:spring_data_commons:3.3.1
Broadcom » Spring Data Commons » Version: 3.3.10

cpe:2.3:a:broadcom:spring_data_commons:3.3.10
Broadcom » Spring Data Commons » Version: 3.3.11

cpe:2.3:a:broadcom:spring_data_commons:3.3.11
Broadcom » Spring Data Commons » Version: 3.3.12

cpe:2.3:a:broadcom:spring_data_commons:3.3.12
Broadcom » Spring Data Commons » Version: 3.3.13

cpe:2.3:a:broadcom:spring_data_commons:3.3.13
Broadcom » Spring Data Commons » Version: 3.3.2

cpe:2.3:a:broadcom:spring_data_commons:3.3.2
Broadcom » Spring Data Commons » Version: 3.3.3

cpe:2.3:a:broadcom:spring_data_commons:3.3.3
Broadcom » Spring Data Commons » Version: 3.3.4

cpe:2.3:a:broadcom:spring_data_commons:3.3.4
Broadcom » Spring Data Commons » Version: 3.3.5

cpe:2.3:a:broadcom:spring_data_commons:3.3.5
Broadcom » Spring Data Commons » Version: 3.3.6

cpe:2.3:a:broadcom:spring_data_commons:3.3.6
Broadcom » Spring Data Commons » Version: 3.3.7

cpe:2.3:a:broadcom:spring_data_commons:3.3.7
Broadcom » Spring Data Commons » Version: 3.3.8

cpe:2.3:a:broadcom:spring_data_commons:3.3.8
Broadcom » Spring Data Commons » Version: 3.3.9

cpe:2.3:a:broadcom:spring_data_commons:3.3.9
Broadcom » Spring Data Commons » Version: 3.4.0

cpe:2.3:a:broadcom:spring_data_commons:3.4.0
Broadcom » Spring Data Commons » Version: 3.4.1

cpe:2.3:a:broadcom:spring_data_commons:3.4.1
Broadcom » Spring Data Commons » Version: 3.4.10

cpe:2.3:a:broadcom:spring_data_commons:3.4.10
Broadcom » Spring Data Commons » Version: 3.4.11

cpe:2.3:a:broadcom:spring_data_commons:3.4.11
Broadcom » Spring Data Commons » Version: 3.4.12

cpe:2.3:a:broadcom:spring_data_commons:3.4.12
Broadcom » Spring Data Commons » Version: 3.4.13

cpe:2.3:a:broadcom:spring_data_commons:3.4.13
Broadcom » Spring Data Commons » Version: 3.4.2

cpe:2.3:a:broadcom:spring_data_commons:3.4.2
Broadcom » Spring Data Commons » Version: 3.4.3

cpe:2.3:a:broadcom:spring_data_commons:3.4.3
Broadcom » Spring Data Commons » Version: 3.4.4

cpe:2.3:a:broadcom:spring_data_commons:3.4.4
Broadcom » Spring Data Commons » Version: 3.4.5

cpe:2.3:a:broadcom:spring_data_commons:3.4.5
Broadcom » Spring Data Commons » Version: 3.4.6

cpe:2.3:a:broadcom:spring_data_commons:3.4.6
Broadcom » Spring Data Commons » Version: 3.4.7

cpe:2.3:a:broadcom:spring_data_commons:3.4.7
Broadcom » Spring Data Commons » Version: 3.4.8

cpe:2.3:a:broadcom:spring_data_commons:3.4.8
Broadcom » Spring Data Commons » Version: 3.4.9

cpe:2.3:a:broadcom:spring_data_commons:3.4.9
Broadcom » Spring Data Commons » Version: 3.5.0

cpe:2.3:a:broadcom:spring_data_commons:3.5.0
Broadcom » Spring Data Commons » Version: 3.5.1

cpe:2.3:a:broadcom:spring_data_commons:3.5.1
Broadcom » Spring Data Commons » Version: 3.5.10

cpe:2.3:a:broadcom:spring_data_commons:3.5.10
Broadcom » Spring Data Commons » Version: 3.5.11

cpe:2.3:a:broadcom:spring_data_commons:3.5.11
Broadcom » Spring Data Commons » Version: 3.5.2

cpe:2.3:a:broadcom:spring_data_commons:3.5.2
Broadcom » Spring Data Commons » Version: 3.5.3

cpe:2.3:a:broadcom:spring_data_commons:3.5.3
Broadcom » Spring Data Commons » Version: 3.5.4

cpe:2.3:a:broadcom:spring_data_commons:3.5.4
Broadcom » Spring Data Commons » Version: 3.5.5

cpe:2.3:a:broadcom:spring_data_commons:3.5.5
Broadcom » Spring Data Commons » Version: 3.5.6

cpe:2.3:a:broadcom:spring_data_commons:3.5.6
Broadcom » Spring Data Commons » Version: 3.5.7

cpe:2.3:a:broadcom:spring_data_commons:3.5.7
Broadcom » Spring Data Commons » Version: 3.5.8

cpe:2.3:a:broadcom:spring_data_commons:3.5.8
Broadcom » Spring Data Commons » Version: 3.5.9

cpe:2.3:a:broadcom:spring_data_commons:3.5.9
Broadcom » Spring Data Commons » Version: 4.0.0

cpe:2.3:a:broadcom:spring_data_commons:4.0.0
Broadcom » Spring Data Commons » Version: 4.0.1

cpe:2.3:a:broadcom:spring_data_commons:4.0.1
Broadcom » Spring Data Commons » Version: 4.0.2

cpe:2.3:a:broadcom:spring_data_commons:4.0.2
Broadcom » Spring Data Commons » Version: 4.0.3

cpe:2.3:a:broadcom:spring_data_commons:4.0.3
Broadcom » Spring Data Commons » Version: 4.0.4

cpe:2.3:a:broadcom:spring_data_commons:4.0.4
Broadcom » Spring Data Commons » Version: 4.0.5

cpe:2.3:a:broadcom:spring_data_commons:4.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41716

Products

Pricing

Contact Us