Vulnerability intelligence
CVE-2026-41840
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
CVSS Score
5.9
Medium
EPSS — Exploit Probability
0.0%
Riskier than 16% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Jun 9, 2026 · latest Jun 9, 2026
Coverage timeline
-
Spring Framework flaws allow LDAP bypass and DoS on Java cloudssecurityonline.info · Jun 9, 2026