Vulnerability intelligence

CVE-2026-59307

Spring Spring Integration

An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring Integration 7.1.0 Spring Integration 7.0.0 7.0.5 Spring Integration 6.5.0 6.5.10 Spring Integration 6.4.0 6.4.12

CVSS Score

High

EPSS — Exploit Probability

0.4%

Riskier than 34% of all CVEs · checked 2026-10-04

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry