CVE-2026-59315

Summary

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

Affected Software

VendorProductVersion RangeStatus
SpringSpring Cloud Config5.0.0 <= 5.0.4affected
SpringSpring Cloud Config4.3.0 <= 4.3.4affected
SpringSpring Cloud Config4.0.0 <= 4.2.8affected
SpringSpring Cloud Config0 <= 3.1.14affected

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References