CVE Catalog
CVE-2026-59277
LowCVSS 3.7Summary
Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as internal (private) or external (public). Affects Spring Security 7.1.0.
Risk Assessment
Incorrect IP classification may lead to improper enforcement of security rules, potentially allowing unauthorized access to internal resources.
Recommendation
Update Spring Security to a patched version and review IP matcher configurations.
Original NVD description (English source)
Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network. Spring Security 7.1.0