critical9.6
CVE-2026-22752
Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.
Impact
Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Spring Authorization Server | from 1.3.0 before 1.3.11 from 1.4.0 before 1.4.10 from 1.5.0 before 1.5.7 |