CVE-2026-22752
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
An authentication bypass vulnerability due to a primary weakness in Spring Authorization Server. Affects versions from 7.0.0 to 7.0.4, from 1.5.0 to 1.5.6, from 1.4.0 to 1.4.9, and from 1.3.0 to 1.3.10.
Risk Assessment
An attacker can bypass authentication mechanisms, leading to unauthorized access to protected resources and potential account takeover.
Recommendation
Immediately update Spring Authorization Server to the latest available version that includes a fix for this vulnerability.
Original NVD description (English source)
Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.