SC
Product
Spring cloud Gateway
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add Spring cloud Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47879 | 8.7 | Aug 27 | Spring Cloud Gateway SSRF and native file access with gRPC Affected: before 3.1.14; 4.0.0 before 4.2.10; 4.3.0 before 4.3.6; 5.0.0 before 5.0.3 |
| CVE-2026-47825 | 8.6 | Jun 15 | Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situations Affected: through 3.1.10; 4.0.0 before 4.1.13; 4.2.0 before 4.2.9; 4.3.0 before 4.3.4.1; 5.0.0 before 5.0.1.1 |
| CVE-2025-41235 | 8.6 | May 30 | CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies Affected: 2.2.10.RELEASE - 4.2.2, 4.3.0-{M1, M2, RC1} before 4.3.0, 4.2.3, 4.1.8, 4.0.12, 3.1.10 |
| CVE-2026-22750 | 7.5 | Apr 10 | SSL bundle configuration silently bypassed in Spring Cloud Gateway Affected: 4.2.0 before 4.2.1 |
Showing 4