CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-59270

Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18 Spring Security 5.8.0 - 5.8.27 Spring Security 5.7.0 - 5.7.25

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 21.1%

CVSS Severity

CVSS v3 Score 9.4

References

https://spring.io/security/cve-2026-59270

Products affected by CVE-2026-59270

Vmware » Spring Security » Version: 6.4.0

cpe:2.3:a:vmware:spring_security:6.4.0
Vmware » Spring Security » Version: 6.4.1

cpe:2.3:a:vmware:spring_security:6.4.1
Vmware » Spring Security » Version: 6.4.10

cpe:2.3:a:vmware:spring_security:6.4.10
Vmware » Spring Security » Version: 6.4.11

cpe:2.3:a:vmware:spring_security:6.4.11
Vmware » Spring Security » Version: 6.4.15

cpe:2.3:a:vmware:spring_security:6.4.15
Vmware » Spring Security » Version: 6.4.16

cpe:2.3:a:vmware:spring_security:6.4.16
Vmware » Spring Security » Version: 6.4.17

cpe:2.3:a:vmware:spring_security:6.4.17
Vmware » Spring Security » Version: 6.4.18

cpe:2.3:a:vmware:spring_security:6.4.18
Vmware » Spring Security » Version: 6.4.2

cpe:2.3:a:vmware:spring_security:6.4.2
Vmware » Spring Security » Version: 6.4.3

cpe:2.3:a:vmware:spring_security:6.4.3
Vmware » Spring Security » Version: 6.4.4

cpe:2.3:a:vmware:spring_security:6.4.4
Vmware » Spring Security » Version: 6.4.5

cpe:2.3:a:vmware:spring_security:6.4.5
Vmware » Spring Security » Version: 6.4.6

cpe:2.3:a:vmware:spring_security:6.4.6
Vmware » Spring Security » Version: 6.4.7

cpe:2.3:a:vmware:spring_security:6.4.7
Vmware » Spring Security » Version: 6.4.8

cpe:2.3:a:vmware:spring_security:6.4.8
Vmware » Spring Security » Version: 6.4.9

cpe:2.3:a:vmware:spring_security:6.4.9
Vmware » Spring Security » Version: 6.5.0

cpe:2.3:a:vmware:spring_security:6.5.0
Vmware » Spring Security » Version: 6.5.1

cpe:2.3:a:vmware:spring_security:6.5.1
Vmware » Spring Security » Version: 6.5.10

cpe:2.3:a:vmware:spring_security:6.5.10
Vmware » Spring Security » Version: 6.5.10.2

cpe:2.3:a:vmware:spring_security:6.5.10.2
Vmware » Spring Security » Version: 6.5.11

cpe:2.3:a:vmware:spring_security:6.5.11
Vmware » Spring Security » Version: 6.5.2

cpe:2.3:a:vmware:spring_security:6.5.2
Vmware » Spring Security » Version: 6.5.3

cpe:2.3:a:vmware:spring_security:6.5.3
Vmware » Spring Security » Version: 6.5.4

cpe:2.3:a:vmware:spring_security:6.5.4
Vmware » Spring Security » Version: 6.5.5

cpe:2.3:a:vmware:spring_security:6.5.5
Vmware » Spring Security » Version: 6.5.6

cpe:2.3:a:vmware:spring_security:6.5.6
Vmware » Spring Security » Version: 6.5.7

cpe:2.3:a:vmware:spring_security:6.5.7
Vmware » Spring Security » Version: 6.5.8

cpe:2.3:a:vmware:spring_security:6.5.8
Vmware » Spring Security » Version: 6.5.9

cpe:2.3:a:vmware:spring_security:6.5.9
Vmware » Spring Security » Version: 7.0.0

cpe:2.3:a:vmware:spring_security:7.0.0
Vmware » Spring Security » Version: 7.0.1

cpe:2.3:a:vmware:spring_security:7.0.1
Vmware » Spring Security » Version: 7.0.2

cpe:2.3:a:vmware:spring_security:7.0.2
Vmware » Spring Security » Version: 7.0.3

cpe:2.3:a:vmware:spring_security:7.0.3
Vmware » Spring Security » Version: 7.0.4

cpe:2.3:a:vmware:spring_security:7.0.4
Vmware » Spring Security » Version: 7.0.5

cpe:2.3:a:vmware:spring_security:7.0.5
Vmware » Spring Security » Version: 7.0.5.1

cpe:2.3:a:vmware:spring_security:7.0.5.1
Vmware » Spring Security » Version: 7.0.6

cpe:2.3:a:vmware:spring_security:7.0.6
Vmware » Spring Security » Version: 7.1.0

cpe:2.3:a:vmware:spring_security:7.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-59270

Products

Pricing

Contact Us